Remote Senior Incident Responder & CSIRT Lead (Enterprise)

Insight Global; United States; Remote; USD 19.000 - 38.000; Vollzeit

Zusammenfassung

Insight Global is seeking a Senior Security Incident Responder to lead enterprise-wide cybersecurity incident handling from discovery through recovery. This remote role in India requires coordinating with business owners, legal, privacy, compliance, and infra teams as part of a CSIRT.

The candidate will leverage SIEM/EDR tools, conduct root-cause analysis, and drive playbooks, automation, and threat intel to reduce risk.

10+ years of experience and strong communication skills are required.

Qualifikationen

• Lead investigations of major cybersecurity incidents and security breaches.
• Coordinate with business owners, legal, privacy, compliance, and infra teams during incidents.
• Serve as a technical leader during major security incidents.

Aufgaben

• Lead investigation, containment, eradication, and recovery of enterprise incidents.
• Coordinate response across cybersecurity, infrastructure, cloud, and applications teams.
• Develop and optimize incident response playbooks, runbooks, and standard operating procedures.
• Design automation and SOAR workflows to improve investigation efficiency.
• Provide incident communications and executive briefings.

Kenntnisse

Incident response

SOC operations

Threat detection

Forensic investigation

Threat hunting

Stakeholder coordination

Automation / SOAR

Cloud security

Log analysis

Communication

Ausbildung

Bachelor's degree in Cybersecurity/Information Security/CS/IT or related field

Tools

Microsoft Sentinel

Splunk

QRadar

Elastic

LogRhythm

Microsoft Defender

CrowdStrike

SentinelOne

Carbon Black

Jobbeschreibung

Insight Global is seeking a Senior Security Incident Responder to lead enterprise-wide cybersecurity incident handling from discovery through recovery. This remote role in India requires coordinating with business owners, legal, privacy, compliance, and infra teams as part of a CSIRT.

The candidate will leverage SIEM/EDR tools, conduct root-cause analysis, and drive playbooks, automation, and threat intel to reduce risk.

10+ years of experience and strong communication skills are required.