Remote Incident Response Lead

MSD Malaysia; Rahway (NJ); On-site; USD 117,000 - 184,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401(k)

Paid holidays

Vacation

Sick days

Job summary

Merck & Co., Inc. in Rahway, NJ is seeking a Lead Incident Response Analyst to run day‑to‑day operations for the Cyber Fusion Center and coordinate a 24x7 incident response across global technology centers.

The role requires on‑call availability for high‑severity incidents and strong leadership to guide a team through containment and long‑term investigations. You will oversee incident scoping, investigation, and remediation with SIEM/EDR/WAF tooling, drive playbook updates, and ensure clear

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity or equivalent work experience.
• 7+ years of hands‑on experience in cybersecurity operations, incident response, or threat detection.
• Experience leading complex investigations involving cloud environments, identity systems, and modern endpoint tooling.
• Familiarity with attacker TTPs (MITRE ATT&CK) and log analysis.

Responsibilities

• Lead the initial response for high impact cybersecurity events within the Cyber Fusion Center.
• Mentor and lead the incident response team and coordinate cross‑location transfers.
• Provide data analysis of incidents and update playbooks to improve processes.

Skills

Adaptability

Analytical Thinking

Cybersecurity

Cyber Threat Analysis

Cyber Threat Hunting

Cyber Threat Intelligence

Data Loss Prevention

Detail‑Oriented

Digital Forensics

Endpoint Management

Event Monitoring

Event Support

Forensic Analysis

Governance Management

Incident/Breach Triage and Containment

Incident Analysis

Incident Management

Incident Response

Incident Response Management

Insider Threat Mitigation

Log Analysis

Malware Analysis

Network Forensics

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

SIEM

EDR

Proxy

WAF

Job description

Merck & Co., Inc. in Rahway, NJ is seeking a Lead Incident Response Analyst to run day‑to‑day operations for the Cyber Fusion Center and coordinate a 24x7 incident response across global technology centers.

The role requires on‑call availability for high‑severity incidents and strong leadership to guide a team through containment and long‑term investigations. You will oversee incident scoping, investigation, and remediation with SIEM/EDR/WAF tooling, drive playbook updates, and ensure clear