Senior Cyber Incident Response Lead — AI-Driven Playbooks

Stryker; Kalamazoo (MI); Remote; USD 136,000 - 271,000; Full time

Job summary

Stryker seeks a Principal Cybersecurity Incident Responder to lead the technical response to significant cybersecurity incidents, guiding containment, eradication, and recovery with risk-based decisions. You will collaborate with Investigations, Detection Engineering, CTI, and Security Operations while strengthening readiness through playbooks, telemetry, and automation.

Preference for Eastern/Central time zones.

Qualifications

• Bachelor's degree or equivalent in a related field with professional experience.
• 8+ years in incident response, digital forensics, threat hunting, or security operations.
• Relevant certifications preferred (e.g., CISSP, GCIH, GCFA, GCFE).

Responsibilities

• Lead the technical response to significant and complex cybersecurity incidents through containment and recovery.
• Set technical priorities, drive investigations, and maintain momentum during incidents.
• Coordinate across multiple teams to determine incident scope and response actions.
• Apply attacker techniques understanding to incidents involving ransomware, data exfiltration, and cloud threats.
• Improve playbooks, tooling, telemetry, and training based on real incidents and exercises.
• Design tabletop exercises and simulations to validate response capabilities.

Skills

Incident response

Digital forensics

Threat hunting

Security operations

Security engineering

Leadership

Education

Bachelor's degree in Cybersecurity/CS/IT or related field

8+ years of relevant cybersecurity experience

Certifications in incident response or related disciplines preferred

Tools

SIEM

EDR

Forensics tools

Threat intelligence platforms

Job description

Stryker seeks a Principal Cybersecurity Incident Responder to lead the technical response to significant cybersecurity incidents, guiding containment, eradication, and recovery with risk-based decisions. You will collaborate with Investigations, Detection Engineering, CTI, and Security Operations while strengthening readiness through playbooks, telemetry, and automation.

Preference for Eastern/Central time zones.