Lead Security Incident Response & Forensics

Insight Global; Wilmington (DE); On-site; USD 140,000 - 190,000; Full time

Job summary

Insight Global is seeking a Senior Security Incident Responder to lead investigations, containment, eradication, and recovery of cybersecurity incidents across the enterprise. You will act as a technical lead during major incidents, coordinating with security operations, infrastructure, legal, privacy, and business teams.

You will leverage SIEM, EDR, threat intel, and forensic techniques to determine attack scope, root cause, and remediation actions, while driving playbook development and

Qualifications

• 10+ years in cybersecurity with SOC and Incident Response experience.
• Experience leading investigations of major cyber incidents and breaches.
• Strong incident response methodologies and forensics knowledge.
• Experience in enterprise/global environments with complex security.
• Ability to coordinate technical and non-technical stakeholders under pressure.
• Experience with SIEM and EDR platforms.

Responsibilities

• Lead investigation and response of major incidents (ransomware, phishing, breaches).
• Perform triage, containment, eradication, recovery, and post-incident activities.
• Analyze alerts, logs, network traffic, endpoint telemetry, cloud activity, threat intel.
• Coordinate response with cybersecurity, infrastructure, legal, privacy, and vendors.
• Develop and optimize incident response playbooks and runbooks.
• Design automation and SOAR workflows to improve efficiency.

Skills

SOC operations

Incident response

Threat detection

Log analysis

Threat hunting

Automation / SOAR

Playbooks / runbooks

Cross-team coordination

Security tooling

Scripting (KQL/SPL/Python/PowerShell/B

Education

Bachelor's degree in Cybersecurity or related field

Tools

Microsoft Sentinel

Splunk

QRadar

Elastic Stack

LogRhythm

Microsoft Defender

CrowdStrike

SentinelOne

Carbon Black

Job description

Insight Global is seeking a Senior Security Incident Responder to lead investigations, containment, eradication, and recovery of cybersecurity incidents across the enterprise. You will act as a technical lead during major incidents, coordinating with security operations, infrastructure, legal, privacy, and business teams.

You will leverage SIEM, EDR, threat intel, and forensic techniques to determine attack scope, root cause, and remediation actions, while driving playbook development and