Senior Cyber Incident Response Lead & Threat Hunter

MaziCTools; United States; Remote; USD 116,700 - 196,100; Part time

Benefits offered by this job

Medical/Dental/Vision coverage

401(k) plan

Tuition reimbursement program

PTO and holidays

Job summary

AT&T is seeking a Part-time Senior Cybersecurity Incident Response professional to lead and coordinate incident response activities from detection to remediation. You will refine response protocols, analyze incidents, and collaborate with multiple security teams to strengthen defenses against evolving threats.

The role requires 3–5 years in incident response, hands-on experience with Splunk, Defender, and cloud platforms, and daily office presence.

Qualifications

• A Bachelor's degree in Information Systems, Engineering, or Cyber Security is preferred, though equivalent experience in cybersecurity incident response will be considered.
• 3-5 years of experience in cybersecurity, with a strong emphasis on incident response and threat analysis.
• Knowledge of Splunk, SentinelOne, Palo Alto (PAN), Microsoft Defender, Azure, AWS required.
• Proficiency in security tools and technologies used for incident detection, analysis, and mitigation.
• Working knowledge of at least 4+ of the following: SIEM technologies, OS hardening, cloud environments, Host Analysis, Network Forensics, Malware Reversing, Intrusion Detection, Anomaly Detection, Threat Research, Threat intelligence, Security alert design, Data analysis.
• Requires Daily Office Presence (3-5 days a week). No relocation assistance is provided.

Responsibilities

• Lead and contribute to Cyber Incident Response efforts from detection through remediation and post-incident analysis.
• Develop and refine incident response protocols to stay ahead of threats.
• Conduct thorough security incident analysis to identify root causes and prevent recurrence.
• Engage in proactive threat hunting and intelligence gathering to inform response strategies.
• Collaborate on cross-functional projects to enhance AT&T’s overall security posture.

Skills

Incident response

Threat analysis

Security best practices

Collaboration

Documentation

Education

Bachelor's degree or equivalent

Tools

Splunk

SentinelOne

Palo Alto

Microsoft Defender

Azure

AWS

Job description

AT&T is seeking a Part-time Senior Cybersecurity Incident Response professional to lead and coordinate incident response activities from detection to remediation. You will refine response protocols, analyze incidents, and collaborate with multiple security teams to strengthen defenses against evolving threats.

The role requires 3–5 years in incident response, hands-on experience with Splunk, Defender, and cloud platforms, and daily office presence.