Senior Cyber Defense Engineer-Remote Incident Response Lead

Arrow Electronics; Colorado; On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

Remote work

Travel opportunities to Arrow offices

Medical, Dental, Vision Insurance

401k matching

Tuition reimbursement

Job summary

Arrow Electronics is seeking a Senior Cyber Defense Engineer to lead incident response investigations across enterprise, cloud, and on‑prem environments. You will perform DFIR tasks, preserve evidence, and produce executive summaries with remediation guidance.

You will also develop detections and automation, tune SIEMs, and collaborate with SOC, Threat Intelligence, and Engineering teams to strengthen monitoring and defense capabilities.

Qualifications

• 5–10+ years of experience in Cyber Security, Incident Response, DFIR, Threat Hunting, Detection Engineering, Security Operations, or related disciplines.
• Proven experience leading enterprise-level cyber incident response investigations.
• Hands-on experience with digital forensic analysis, evidence collection, malware analysis, and investigative reporting.
• Experience across cloud, hybrid, identity, endpoint, network, and on‑premises environments.
• Experience developing detections, automations, playbooks, scripts, queries, or engineering solutions.

Responsibilities

• Lead complex cyber incident investigations across enterprise, cloud, hybrid, and on-premises environments.
• Perform DFIR activities including forensic artifact analysis and timeline reconstruction.
• Develop detections, maintain SIEM rules, and improve response workflows.
• Mentor SOC Leads, Analysts, and Engineers on investigative methodologies and playbooks.

Skills

Incident Response

DFIR

Threat Hunting

Detection Engineering

Security Operations

Education

Bachelor’s degree in Cyber Security / CS / IT

Tools

Microsoft Sentinel

Splunk

QRadar

Defender XDR

PowerShell

Python

Kusto

SQL

Job description

Arrow Electronics is seeking a Senior Cyber Defense Engineer to lead incident response investigations across enterprise, cloud, and on‑prem environments. You will perform DFIR tasks, preserve evidence, and produce executive summaries with remediation guidance.

You will also develop detections and automation, tune SIEMs, and collaborate with SOC, Threat Intelligence, and Engineering teams to strengthen monitoring and defense capabilities.