Senior Cyber Incident Responder - Lead IR & Forensics

Highmark Health; Pennsylvania; Hybrid; USD 86,000 - 139,000; Full time

Job summary

Highmark Health is seeking a Senior Cyber Incident Responder to lead investigations in the Cyber Fusion Center and ensure CIRP adherence. You will set the strategy for security activities and coordinate across teams.

The role requires 5+ years in malware analysis, forensics, data/network analysis, or incident handling, and involves real-time incident response work and leadership responsibilities.

Qualifications

• Bachelor's degree in a relevant field or equivalent experience.
• 5+ years in malware analysis, forensics, data/network analysis, or incident handling.
• Preferred certifications in IT security and risk management.

Responsibilities

• Coordinate and provide expert support to resolve cyber incidents enterprise-wide.
• Correlate data to identify vulnerabilities and enable remediation.
• Analyze log files to identify threats to network security.
• Triage incidents: scope, urgency, impact, vulnerabilities, remediation.
• Perform trend analysis and reporting to leadership.
• Collect forensic images and inspect for mitigation opportunities.
• Handle real-time cyber defense tasks to support IRTs.
• Analyze network alerts and determine root causes.
• Track incidents from detection to final resolution.
• Other duties as assigned.

Skills

Malware Analysis

Digital Forensics

Data Analysis

Network Analysis

Penetration Testing

Trends Analysis

Information Assurance

Incident Handling

Security Tools

Education

Bachelor's in computer science

Substitutions 6 years security experience

Masters in related field (preferred)

Tools

HITRUST CSF

NIST 800-83

ITIL

CISSP

GCFA

GCIH

Job description

Highmark Health is seeking a Senior Cyber Incident Responder to lead investigations in the Cyber Fusion Center and ensure CIRP adherence. You will set the strategy for security activities and coordinate across teams.

The role requires 5+ years in malware analysis, forensics, data/network analysis, or incident handling, and involves real-time incident response work and leadership responsibilities.