Lead Incident Response & Security Operations Engineer

RiseMe; Greenville (TX); Hybrid; USD 140,000 - 190,000; Full time

Job summary

RiseMe is seeking a Lead Incident Response and Security Operations Engineer to establish and evolve the security operations across a hybrid environment including AWS, data centers, and corporate locations. You will oversee monitoring, investigation, detection engineering, incident coordination, and risk escalation to strengthen confidentiality, integrity, and availability.

You will develop response plans, playbooks, and after-action reports, while coordinating remediation for vulnerabilities and

Qualifications

• Active US Secret clearance or higher required.
• Experience in security operations and incident response.
• Hybrid-cloud environments experience, AWS and on-prem.
• Strong documentation, ticketing, and stakeholder communications.

Responsibilities

• Lead incident response across AWS, datacenter, network, endpoint, and corporate environments.
• Develop and maintain incident-response plans, escalation paths, and runbooks.
• Coordinate remediation tracking for vulnerabilities, findings, and corrective actions.
• Produce security-operations metrics, risk reports, and stakeholder briefings.
• Onboard and maintain log sources and integrations to support monitoring and audits.

Skills

Incident response

Security operations

Threat hunting

Hybrid-cloud

Log analysis

Education

Bachelor’s Degree

Graduate Degree

13+ years experience in lieu of degree

Tools

Splunk

Wazuh

AWS security

SIEM design

Job description

RiseMe is seeking a Lead Incident Response and Security Operations Engineer to establish and evolve the security operations across a hybrid environment including AWS, data centers, and corporate locations. You will oversee monitoring, investigation, detection engineering, incident coordination, and risk escalation to strengthen confidentiality, integrity, and availability.

You will develop response plans, playbooks, and after-action reports, while coordinating remediation for vulnerabilities and