Senior Cyber Defense & Incident Response Engineer

Relativity; Illinois; Hybrid; USD 104,000 - 156,000; Full time

Job summary

Relativity is seeking an Advanced Cyber Security Engineer to safeguard our network and RelativityOne Government product. You will investigate threats, analyze logs, and provide remediation guidance while collaborating with a team of cyber experts.

A US citizen and Public Trust clearance are required; the role supports global SaaS operations and offers competitive compensation. You will triage alerts, perform near real-time analysis, tune detections, and help develop incident handling policies.

Qualifications

• Minimum of 3 years of experience in incident response, SOC, incident analysis, or computer forensics.
• Strong cyber incident response skills across network, memory, and packet analysis.
• Experience with TCP/IP, cryptography, and web application attacks.
• Ability to collaborate cross-functionally to mature Relativity's security posture.
• Understanding of attacker techniques and mitigating controls.

Responsibilities

• Review, validate, and triage alerts with log data from sensors and threat intel.
• Assess impact of security events using host, cloud, and network indicators to escalate incidents.
• Act as initial escalation point and drive investigations to completion.
• Perform near real-time analysis of correlated logs across devices to classify incidents.
• Proactively search telemetry to detect advanced threats evading defenses.
• Help develop incident handling policies aligned with global standards.
• Research emerging threats and apply countermeasures in a changing environment.
• Serve as SME in analysis of observed malicious activity.
• Tune alerts and support junior colleagues in detection engineering.
• Maintain security tooling configurations and update as required.
• Assist on projects as needed.

Skills

Incident response experience

Security operations center

Incident analysis

Computer forensics

Education

Bachelor’s Degree or equivalent professional/military experience

Certifications: GCIA/GCFA/GCIH/CEH/OSCP

Experience in SaaS environments a plus

Tools

Azure

AWS

GCP

SIEM

Scripting languages

Job description

Relativity is seeking an Advanced Cyber Security Engineer to safeguard our network and RelativityOne Government product. You will investigate threats, analyze logs, and provide remediation guidance while collaborating with a team of cyber experts.

A US citizen and Public Trust clearance are required; the role supports global SaaS operations and offers competitive compensation. You will triage alerts, perform near real-time analysis, tune detections, and help develop incident handling policies.