Senior Cyber Defense Engineer - Incident Response

Relativity; Chicago (IL); Hybrid; USD 104,000 - 156,000; Full time

Job summary

Relativity is seeking an Advanced Cyber Security Engineer to protect Relativity's network and infrastructure, investigating threats and providing remediation guidance. This role supports the RelativityOne Government product and requires U.S.

citizenship with a Public Trust clearance process handled by the government. Responsibilities include triaging alerts, incident escalation, and working with cross-functional cyber experts to evolve detection and response capabilities across cloud, on-prem,

Qualifications

• Minimum of 3 years of experience in incident response, security operations center, incident analysis, or computer forensics.
• Strong incident response skills (e.g., network forensics, memory forensics, and/or packet analysis).
• Knowledge of TCP/IP, network services, cryptography and web application attacks.
• Ability to collaborate within a cross-functional team to advance Relativity's security posture.
• Understanding of attacker methods and tools used to access private systems and data.
• Ability to independently prioritize complex events.
• Understanding infection mechanisms, malicious behavior, exploitation techniques, and mitigating controls.

Responsibilities

• Review, validate, and triage alerts and analyze logs from diverse sensors and threat intel sources.
• Assess the impact of security events using host, cloud, and network indicators to escalate incidents.
• Be the initial escalation point for cyber security events and drive investigations to completion.
• Conduct real-time analysis of logs/alerts from devices to classify security incidents.
• Search telemetry to detect advanced threats evading existing solutions.
• Help develop incident handling policies aligned with standards.
• Research emerging threats and apply countermeasures in a fast-changing environment.
• Serve as a subject matter expert on observed malicious activity.

Skills

Incident response

Security operations

Network forensics

Memory forensics

Packet analysis

TCP/IP

Cryptography

Web app security

Education

Bachelor's degree or higher

Tools

Azure

AWS

GCP

Job description

Relativity is seeking an Advanced Cyber Security Engineer to protect Relativity's network and infrastructure, investigating threats and providing remediation guidance. This role supports the RelativityOne Government product and requires U.S.

citizenship with a Public Trust clearance process handled by the government. Responsibilities include triaging alerts, incident escalation, and working with cross-functional cyber experts to evolve detection and response capabilities across cloud, on-prem,