Senior Cyber Incident Response Lead

Highmark Health; Honolulu (HI); On-site; USD 86,000 - 139,000; Full time

Job summary

Highmark Health in Honolulu, HI seeks a Senior Cyber Incident Responder to lead investigations within the Cyber Fusion Center, ensure CIRP adherence, and guide strategy across teams. You will mentor others, delegate tasks by complexity, and shape security initiatives while coordinating with internal partners.

The role requires expert handling of incidents, forensic readiness, and strong analytical skills, with remote/office-based flexibility to support enterprise-wide defenses.

Qualifications

• Bachelor's degree in a related field is required.
• Substitutions may apply for experience with HITRUST CSF or NIST 800-83.

Responsibilities

• Coordinate and provide expert technical support to enterprise-wide cyber defense technicians to resolve cyber defense incidents. (20%)
• Correlate incident data to identify vulnerabilities and enable remediation. (20%)
• Analyze log files from various sources to identify threats to network security. (10%)
• Perform cyber defense incident triage including scope, urgency, and impact. (10%)
• Perform cyber defense trend analysis and reporting with leadership recommendations. (10%)
• Perform initial forensic collection and inspection for remediation on enterprise systems. (10%)
• Perform real-time cyber defense incident handling to support deployable IRTs. (10%)
• Receive and analyze network alerts to determine causes. (5%)
• Track and document cyber defense incidents from detection to resolution. (5%)
• Other duties as assigned.

Skills

Malware analysis

Digital forensics

Data/network analysis

Penetration testing

Trends analysis

Information assurance

Cyber incident handling

Education

Bachelor's degree in computer science, cybersecurity, information technology, software engineering, information systems, computer engineering, or related field

Job description

Highmark Health in Honolulu, HI seeks a Senior Cyber Incident Responder to lead investigations within the Cyber Fusion Center, ensure CIRP adherence, and guide strategy across teams. You will mentor others, delegate tasks by complexity, and shape security initiatives while coordinating with internal partners.

The role requires expert handling of incidents, forensic readiness, and strong analytical skills, with remote/office-based flexibility to support enterprise-wide defenses.