Senior CSIRT Lead — Remote Incident Response & Strategy

Hidden Jobs; United States; Remote; USD 180,000 - 240,000; Full time

Benefits offered by this job

Remote US-wide

Generous paid time off

Medical, dental & vision benefits

401(k) with employer match

Home office stipend

Education and professional development

Stock options

Job summary

Huntress is seeking a senior, high-impact staff member for its internal Computer Security Incident Response Team. You will own the full incident response lifecycle, from triage to remediation, while coordinating with engineering, product security, and detection functions.

The role blends hands-on technical response with program leadership, readiness exercises, and cross-functional collaboration to strengthen defenses across the organization.

Qualifications

• 8+ years in incident response, SOC ops, or digital forensics.
• Ability to translate complex problems into practical security solutions.
• Experience leading small project teams and cross-functional alignment.

Responsibilities

• Lead identification, triage, and validation of security incidents for the internal IR program.
• Design and run tabletop exercises and purple-team engagements to keep responders prepared.
• Collaborate with engineering, product security, and detection teams to tune telemetry and reduce noise.
• Partner with offensive security to surface visibility gaps and drive remediation.
• Facilitate post-incident reviews and push improvements to tooling and processes.
• Maintain incident response playbooks and scalable configurations.

Skills

Incident response leadership

SOC operations

EDR/MDR platforms

Cloud security

Executive communication

Tools

SIEM

ELK

Confluence

Jira

Lucidchart

Job description

Huntress is seeking a senior, high-impact staff member for its internal Computer Security Incident Response Team. You will own the full incident response lifecycle, from triage to remediation, while coordinating with engineering, product security, and detection functions.

The role blends hands-on technical response with program leadership, readiness exercises, and cross-functional collaboration to strengthen defenses across the organization.