Security Incident Response Lead — On-Call & Equity

United States Digital Space LLC; Boston (MA); On-site; USD 130,000 - 170,000; Full time

Job summary

United States Digital Space LLC is seeking an Incident Response Lead to drive security incident response across the enterprise. In this role, you will serve as the primary internal escalation point and hands‑on responder for security incidents, partnering with the company’s 24x7 SOC provider and cross‑functional stakeholders to investigate, contain, and remediate threats.

This is a highly technical individual contributor role with significant ownership and visibility across Security, IT, GRC,

Qualifications

• 7+ years of incident response, forensics, threat detection, or SOC experience.
• Lead investigations in cloud-native environments.
• Hands-on host, cloud, and log-based investigations.
• Proficient with SIEM, EDR, and cloud monitoring tools.
• Experience coordinating with external SOC/MDR providers.
• Familiar with MITRE ATT&CK and its use in detection/response.
• Experience supporting breach response under GDPR/HIPAA/PCI or similar.

Responsibilities

• Lead hands-on incident response activities and act as primary escalation point.
• Coordinate central incident command across Security, IT, GRC, and Legal.
• Validate alerts with SOC; guide investigations and containment.
• Perform host, cloud, and log-based investigations; coordinate with forensic firms.
• Maintain and improve incident response playbooks and workflows.
• Lead post-incident reviews and root-cause analysis to define remediation actions.
• Develop tabletop exercises to test response readiness.
• Support breach impact assessments and regulatory notifications.

Skills

Incident response

Digital forensics

Threat detection

SOC operations

Communication

MITRE ATT&CK

Regulatory awareness

Education

Bachelor’s degree

GCIH/GCFA/CISSP

Tools

SIEM

EDR

Cloud monitoring

MDR providers

Job description

United States Digital Space LLC is seeking an Incident Response Lead to drive security incident response across the enterprise. In this role, you will serve as the primary internal escalation point and hands‑on responder for security incidents, partnering with the company’s 24x7 SOC provider and cross‑functional stakeholders to investigate, contain, and remediate threats.

This is a highly technical individual contributor role with significant ownership and visibility across Security, IT, GRC,