Lead Cyber Incident Responder - Forensics & IR Strategy

Highmark Health; Austin (TX); Hybrid; USD 86,000 - 139,000; Full time

Job summary

Highmark Health in the United States seeks a Senior Cyber Incident Responder, the top investigator in the Cyber Fusion Center. You will lead investigations, ensure CIRP adherence, and coordinate with internal teams to allocate scope and resources.

You will supervise real-time incident handling, perform forensic collections, analyze logs from hosts, network devices, IDS, and firewalls, and deliver findings and remediation guidance to strengthen enterprise security.

Qualifications

• Bachelor's in computer science, cybersecurity, information technology, software engineering, information systems, computer engineering, or other related field.
• Masters in related field preferred.
• 6 years of experience with HITRUST CSF or NIST 800-53 cyber security frameworks can substitute for education.

Responsibilities

• Coordinate and provide expert technical support to resolve cyber defense incidents as SME.
• Correlate incident data to identify vulnerabilities and enable remediation.
• Analyze logs from hosts, network devices, IDS, and firewalls to identify threats.
• Perform incident triage to determine scope, urgency, impact, and remediation recommendations.
• Conduct cyber defense trend analysis and reporting for leadership.
• Perform forensic collections and real-time incident handling to support IRTs.
• Receive and analyze network alerts to determine causes and actions.
• Track and document cyber defense incidents from detection to resolution.

Skills

Malware analysis

Digital forensics

Data/Network analysis

Penetration testing

Trends analysis

Information assurance

Cyber incident handling

Education

Bachelor's in CS/Cybersecurity/IT/Software Eng/IS/CS Eng or related field

Masters in related field (preferred)

Job description

Highmark Health in the United States seeks a Senior Cyber Incident Responder, the top investigator in the Cyber Fusion Center. You will lead investigations, ensure CIRP adherence, and coordinate with internal teams to allocate scope and resources.

You will supervise real-time incident handling, perform forensic collections, analyze logs from hosts, network devices, IDS, and firewalls, and deliver findings and remediation guidance to strengthen enterprise security.