Lead Cyber Incident Response Analyst

AmTrust Financial Services, Inc.; Cleveland (OH); On-site; USD 85,000 - 125,000; Full time

Benefits offered by this job

Medical & Dental Plans

Life Insurance

401k Savings Plans

Paid Time Off

Job summary

AmTrust Financial Services, Inc. in Cleveland seeks an experienced Cyber Security Incident Response II to detect, analyze, investigate, and respond to cybersecurity threats across the enterprise.

The role leads medium- to high-complexity incidents, performs digital forensics, and coordinates containment and recovery actions. Candidates should have 3–5+ years in incident response, strong knowledge of SIEM/EDR, and the ability to communicate risk-based findings to technical and business audiences.

Qualifications

• Bachelor's degree in Cyber Security, IT, Computer Science or related field; practical experience considered.
• 3–5+ years in cyber security incident response, digital forensics, or related areas.
• Experience investigating incidents in enterprise environments; strong analytical and documentation skills.

Responsibilities

• Investigate security alerts and incidents to determine scope, impact, and remediation actions.
• Lead analysis and response for medium- to high-complexity incidents with containment and recovery.
• Perform digital forensics, log analysis, and host/network investigations using enterprise tools.
• Analyze IOCs, TTPs, and threat intelligence to support investigations.
• Use SIEM, EDR, cloud security, and case management platforms for incident response.
• Develop detection logic, rules, and response playbooks to improve capabilities.
• Document findings, timelines, root cause, and lessons learned per procedures.
• Collaborate with IT, Legal, Risk, HR, and Compliance during investigations.
• Participate in tabletop exercises and post-incident reviews to improve readiness.
• Suggest improvements to controls, content, coverage, and processes.

Skills

Threat detection

Incident response

Digital forensics

IOCs & TTPs

Communication of risk

Analytical thinking

Time management

Education

Bachelor's degree in Cyber Security / IT / Computer Science

Tools

SIEM

EDR/XDR

Cloud security platforms

PowerShell

Python

KQL / SPL

Job description

AmTrust Financial Services, Inc. in Cleveland seeks an experienced Cyber Security Incident Response II to detect, analyze, investigate, and respond to cybersecurity threats across the enterprise.

The role leads medium- to high-complexity incidents, performs digital forensics, and coordinates containment and recovery actions. Candidates should have 3–5+ years in incident response, strong knowledge of SIEM/EDR, and the ability to communicate risk-based findings to technical and business audiences.