Remote Senior Incident Response Engineer – Lead IR

Elsevier; Elm (PA); Remote; USD 89,000 - 142,000; Full time

Benefits offered by this job

Annual incentive bonus

Job summary

Elsevier is seeking a senior cyber security professional to join the incident response team, leading investigations of security incidents across endpoints and cloud platforms, and delivering critical threat insights and mitigation research.

You will develop incident response plans, analyze events for anomalies, and help strengthen protection technologies while coordinating with global teams to safeguard assets and data.

Qualifications

• Advanced knowledge of cloud-agnostic infrastructure security.
• Experience performing forensic and incident response investigations.
• Ability to analyze security events for anomalous activity and identify threats.
• Experience developing security improvement and remediation programs.
• Experience navigating cloud and web environments.
• Certifications: CCFE, GCFE, CISSP, CISM, SANS, GIAC, ISACA, CSRIC or related.

Responsibilities

• Improve resilience of security protection and mitigation technologies and processes to protect assets efficiently.
• Develop and execute incident response plans and lead full incident lifecycle including forensic investigations.
• Create comprehensive incident reports and intelligence for high-confidence threats to brand and infrastructure.
• Analyze and tune security controls, define mitigation rules, and support troubleshooting of detection/protection issues.
• Review tools and processes to strengthen security capabilities and close gaps.
• Lead analysis of security events and coordinate actions to safeguard assets against current and foreseen threats.

Skills

Cloud security

Incident response

Forensic analysis

Threat detection

Vulnerability assessment

Web & cloud security

Tools

CCFE

GCFE

CISSP

CISM

SANS

GIAC

ISACA

CSRIC

Job description

Elsevier is seeking a senior cyber security professional to join the incident response team, leading investigations of security incidents across endpoints and cloud platforms, and delivering critical threat insights and mitigation research.

You will develop incident response plans, analyze events for anomalies, and help strengthen protection technologies while coordinating with global teams to safeguard assets and data.