Senior Cybersecurity Incident Lead

AeroVironment, Inc.; San Diego (CA); On-site; USD 101,000 - 153,000; Full time

Benefits offered by this job

Medical benefits

401K with company matching

9/80 work schedule

Paid holiday shutdown

Job summary

AeroVironment, Inc. seeks a Senior Cybersecurity Analyst to lead investigations, containment, and remediation of incidents across the organization.

You will serve as a technical escalation point and guide less experienced analysts while coordinating with IT, engineering, legal and business stakeholders. The ideal candidate has strong endpoint and network forensics, SIEM/EDR experience, threat hunting, and security automation, with the ability to drive incident leadership and post‑incident

Qualifications

• 5+ years of experience in cybersecurity incident response or related field.
• Experience leading investigations of complex security incidents including ransomware, phishing, account compromise and data exfiltration.

Responsibilities

• Lead complex cybersecurity investigations from triage to closure and document thoroughly.
• Serve as primary technical lead for escalated incidents across teams.
• Analyze endpoint, identity, email, network and cloud telemetry to determine scope and impact.
• Develop incident timelines, identify root causes and indicators of compromise.
• Coordinate containment and remediation with IT and business stakeholders.
• Investigate phishing, malware, ransomware and insider threats within authority.
• Use SIEM and EDR tools to correlate alerts and validate findings.
• Mentor analysts and lead post-incident reviews with actionable follow-ups.

Skills

Incident response

Leadership

SIEM/EDR

Threat hunting

Automation

Communication

On-call leadership

Education

Bachelor's in Cybersecurity or related field

GIAC/CISSP or similar certifications

Tools

Microsoft Sentinel

Microsoft Defender

PowerShell

Python

Azure/AWS/GCP

Job description

AeroVironment, Inc. seeks a Senior Cybersecurity Analyst to lead investigations, containment, and remediation of incidents across the organization.

You will serve as a technical escalation point and guide less experienced analysts while coordinating with IT, engineering, legal and business stakeholders. The ideal candidate has strong endpoint and network forensics, SIEM/EDR experience, threat hunting, and security automation, with the ability to drive incident leadership and post‑incident