Lead Cybersecurity Incident Response Architect

AT&T; Charlotte (NC); On-site; USD 155,000 - 233,000; Full time

Benefits offered by this job

Medical/Dental/Vision coverage

401(k) plan

Tuition reimbursement program

Paid Time Off and Holidays

Paid Parental Leave

Disability Benefits

Employee wellness programs

Employee discounts on mobility plans

Job summary

AT&T is seeking a Principal Cybersecurity Incident Response Analyst to lead complex investigations across its enterprise environment. You will act as Lead Investigator for escalated incidents, coordinating containment, eradication, and recovery efforts while mentoring junior team members.

The role requires expert technical leadership, proactive threat hunting, and the ability to communicate with executive stakeholders.

Qualifications

• Bachelor's degree in Computer Science or Cybersecurity required.
• 7+ years of related cybersecurity experience preferred.
• Experience leading complex cybersecurity investigations and incident response.
• Experience with cloud-native and hybrid environments.

Responsibilities

• Lead cybersecurity investigations for escalated incidents and suspicious activity.
• Serve as Lead Investigator for escalated incidents.
• Coordinate containment, eradication, and recovery activities during major events.
• Develop and improve incident response playbooks and detection engineering.
• Mentor analysts and investigators within Incident Response.

Skills

Cyber Incident Response

Threat Hunting

Digital Forensics

Threat Intelligence Analysis

Security Operations

Scripting/Automation

Cloud Security

Windows/Linux/macOS investigations

TTPs knowledge

Network/Host Forensics

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

Splunk

EDR/XDR

Job description

AT&T is seeking a Principal Cybersecurity Incident Response Analyst to lead complex investigations across its enterprise environment. You will act as Lead Investigator for escalated incidents, coordinating containment, eradication, and recovery efforts while mentoring junior team members.

The role requires expert technical leadership, proactive threat hunting, and the ability to communicate with executive stakeholders.