Senior Cyber Incident Responder & IR Lead

Forensic Focus; Charlotte (NC); On-site; USD 90,000 - 130,000; Full time

Job summary

Forensic Focus seeks an experienced incident responder to lead escalated investigations beyond initial SOC triage. You will analyze logs, telemetry, and forensic evidence across endpoints, networks, and applications to determine attack vectors, scope, and root cause.

The role requires 4+ years of hands-on incident response with strong skills in SIEM and EDR, log analysis, and network security concepts, and involves on-call rotations for significant incidents outside normal hours.

Qualifications

• Requires four or more years of hands-on incident response, incident handling, or DFIR experience.
• Strong skills in analyzing logs and telemetry, and identifying indicators of compromise.

Responsibilities

• Lead hands-on investigation of escalated cybersecurity incidents beyond initial SOC triage.
• Analyze logs, telemetry, and forensic evidence across endpoints, networks, web apps, and firewalls to determine attack vectors, scope and root cause.

Skills

SIEM

EDR

Log analysis

Network security

Indicators of compromise

Incident reconstruction

Tools

SIEM platforms

EDR platforms

Job description

Forensic Focus seeks an experienced incident responder to lead escalated investigations beyond initial SOC triage. You will analyze logs, telemetry, and forensic evidence across endpoints, networks, and applications to determine attack vectors, scope, and root cause.

The role requires 4+ years of hands-on incident response with strong skills in SIEM and EDR, log analysis, and network security concepts, and involves on-call rotations for significant incidents outside normal hours.