Senior Cyber Incident Responder - Remote & Threat Hunter

Guaranteed Rate, Inc.; Chicago (IL); Remote; USD 130,000 - 150,000; Full time

Job summary

Guaranteed Rate, Inc. is seeking a Senior Cyber Security Incident Responder to lead and mature our incident response program. You will manage detection, containment, and recovery while coordinating with IT, Legal, and executives.

The role requires 5+ years in cybersecurity with at least 2 years in SOC/IR, and hands-on experience with SIEM/EDR tools. Remote options exist, with Chicago as a core hub for collaboration.

Qualifications

• 5+ years of hands-on cybersecurity experience with 2+ years in Tier 2/3 security operations or incident response.
• Knowledge of threat vectors, malware behavior, APTs and attacker TTPs.
• Experience with incident response plans, tabletop exercises, and post-incident reviews.
• Familiarity with NIST SANS, MITRE ATT&CK, and regulatory requirements.
• Strong scripting/automation experience is a plus.

Responsibilities

• Mature the incident response program across preparation, detection, containment, eradication and recovery.
• Investigate security events to determine impact, root cause and remediation steps.
• Maintain runbooks and playbooks aligned with evolving threats.
• Coordinate with IT, Legal, Compliance and leadership during major incidents.
• Optimize SIEM/EDR and threat intel tooling to reduce detection and response time.
• Escalate high-severity incidents and report findings clearly to leadership.
• Develop metrics to measure MTTD/MTTR and overall program effectiveness.
• Collaborate on training and tabletop exercises to improve readiness.

Skills

Incident response

Threat hunting

Detection engineering

Threat intelligence

Fraud investigations

Python scripting

Education

Bachelor's degree in cybersecurity/IT

Tools

Splunk

Sentinel

CrowdStrike

Carbon Black

Forensics tools

Job description

Guaranteed Rate, Inc. is seeking a Senior Cyber Security Incident Responder to lead and mature our incident response program. You will manage detection, containment, and recovery while coordinating with IT, Legal, and executives.

The role requires 5+ years in cybersecurity with at least 2 years in SOC/IR, and hands-on experience with SIEM/EDR tools. Remote options exist, with Chicago as a core hub for collaboration.