Senior Cyber Incident Response Engineer

American Technology Services LLC; Atlanta (GA); Hybrid; USD 120,000 - 160,000; Full time

Job summary

American Technology Services (ATS) is seeking a Security Operations Engineer to join the Cybersecurity team. You will be the primary responder to security incidents across the enterprise, reporting to the Cybersecurity Manager.

You will analyze logs and EDR telemetry across medical devices, cloud applications, workstations, and data exchange platforms; conduct investigations on Windows, Linux, iOS, and cloud platforms using SIEM tools; and develop incident response playbooks.

Qualifications

• Bachelor’s degree or equivalent experience; cybersecurity certs preferred.
• 6+ years in cybersecurity including incident handling/response.
• Knowledge of MITRE ATT&CK, ITIL, and risk management.
• Strong communication and documentation skills.
• Ability to work independently and in teams.

Responsibilities

• Serve as primary responder to security incidents, monitoring, triaging, and investigating alerts.
• Collaborate with cross-functional teams to document and coordinate Incident Response processes.
• Maintain and organize cybersecurity documentation and incident response playbooks.
• Lead incident post-mortems and distill lessons into actionable reports.
• Analyze logs and EDR telemetry across medical devices, cloud apps, workstations, and data exchange platforms.
• Investigate Windows, Linux, iOS, and cloud platforms using SIEM tools.
• Participate in a global on-call rotation.
• Identify opportunities for automation and improving detection capabilities.
• Perform proactive threat hunting and assess evolving threats.
• Assist in forensic acquisition, malware analysis, and network analysis.

Skills

Incident response

Threat analysis

Communication

Team collaboration

Adaptability

Education

Bachelor's degree in related field

Tools

SIEM

EDR

Cloud security

Job description

American Technology Services (ATS) is seeking a Security Operations Engineer to join the Cybersecurity team. You will be the primary responder to security incidents across the enterprise, reporting to the Cybersecurity Manager.

You will analyze logs and EDR telemetry across medical devices, cloud applications, workstations, and data exchange platforms; conduct investigations on Windows, Linux, iOS, and cloud platforms using SIEM tools; and develop incident response playbooks.