Senior Cyber Incident Response Lead

U.S. Bank; Atlanta (GA); On-site; USD 120,000 - 141,000; Full time

Benefits offered by this job

Healthcare (medical, dental, vision)

Paid vacation

Up to 11 paid holidays

401(k) and employer-funded retirement

Job summary

U.S. Bank is seeking a Senior Cybersecurity Incident Responder to join our Cybersecurity Incident Response team.

The role focuses on investigating escalated cybersecurity events, performing hands-on analysis, and determining the scope, impact, and root cause of incidents. The candidate will lead investigations beyond initial SOC triage, analyze logs and telemetry, conduct digital forensics, and communicate findings with technical precision.

Qualifications

• 4+ years in hands-on cybersecurity Incident Response, Incident Handling, or DFIR.
• Experience investigating cybersecurity incidents from escalation through conclusion.
• Strong security log analysis and telemetry investigation skills.
• Hands-on experience using SIEM platforms.
• Hands-on experience using EDR technologies.
• Experience with digital forensics or cyber investigations.
• Knowledge of network security concepts, protocols, and activity analysis.
• Ability to independently manage complex incident investigations and reach technically supported conclusions.
• Willing to participate in an on-call rotation and respond outside normal business hours.

Responsibilities

• Lead hands-on investigation of escalated cybersecurity events and incidents.
• Determine whether suspicious activity represents a confirmed cybersecurity incident.
• Analyze security logs, alerts, events, and telemetry to identify malicious or anomalous activity.
• Reconstruct incident timelines and determine attack vectors, scope, impact, and root cause.
• Perform digital forensics and technical analysis in support of cybersecurity investigations.
• Use SIEM and EDR platforms during active investigations.
• Investigate suspicious activity involving endpoints, networks, web applications, firewalls, and other security technologies.
• Identify indicators of compromise (IOCs) and other evidence.
• Document investigation findings and communicate technically supported conclusions.
• Collaborate with SOC analysts and other cybersecurity teams during complex incidents.
• Support containment, remediation, and recovery activities.
• Participate in an on-call rotation approximately every 4-6 weeks.

Skills

Incident Response

DFIR

SIEM

EDR

Forensics

Network security

Incident investigation

On-call readiness

Education

Bachelor's degree or equivalent

Tools

Microsoft Sentinel

Microsoft Defender

Akamai security

Job description

U.S. Bank is seeking a Senior Cybersecurity Incident Responder to join our Cybersecurity Incident Response team.

The role focuses on investigating escalated cybersecurity events, performing hands-on analysis, and determining the scope, impact, and root cause of incidents. The candidate will lead investigations beyond initial SOC triage, analyze logs and telemetry, conduct digital forensics, and communicate findings with technical precision.