Principal Cybersecurity Lead: Incident Response & Defenses

E-Space; Arlington (TX); On-site; USD 160,000 - 220,000; Full time

Benefits offered by this job

Competitive salaries

Health and wellness programs

Paid holidays and time off

Learning and development opportunities

US‑only optional legal services

Job summary

E-Space seeks a deeply technical Principal Cybersecurity Lead to defend the company as an active operator, security engineer, and incident leader. You will investigate suspicious activity, write detection and response code, and drive incidents to technically sound conclusions across networks, endpoints, cloud, and identity.

You will monitor threat campaigns, translate intelligence into practical defenses, and partner with cross‑functional teams to reduce systemic risk while building durable

Qualifications

• Substantial hands‑on experience defending complex corporate environments and leading high‑severity investigations from initial signal through containment and root cause.
• Demonstrated hacker mindset and practical knowledge of exploitation, persistence, credential theft, identity attacks, lateral movement, evasion, C2, and exfiltration.
• Deep understanding of TCP/IP, DNS, HTTP/TLS, routing, segmentation, firewalls, proxies, VPNs, wireless, endpoints, identity systems, cloud services, and enterprise logging.

Responsibilities

• Develop and maintain high‑quality SIEM/EDR/NDR detections and hunting content.
• Lead triage, containment, eradication, recovery, forensics, and post‑incident improvements.
• Design and run detection validation, purple‑team exercises, and authorized adversary emulation.
• Write production‑quality detection and response code with a hacker mindset.
• Communicate risk and decisions clearly to engineers, executives, legal, and external responders.

Skills

Threat intelligence

Threat hunting

Incident response

Detection engineering

Security architecture

Programming

SIEM/XDR

Cloud security

Zero trust

Tools

SIEM

EDR

NDR

Cloud telemetry

Threat modeling

Job description

E-Space seeks a deeply technical Principal Cybersecurity Lead to defend the company as an active operator, security engineer, and incident leader. You will investigate suspicious activity, write detection and response code, and drive incidents to technically sound conclusions across networks, endpoints, cloud, and identity.

You will monitor threat campaigns, translate intelligence into practical defenses, and partner with cross‑functional teams to reduce systemic risk while building durable