Senior Cybersecurity Incident Lead

BlueHalo; San Diego (CA); Presencial; USD 101.000 - 153.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

401K with company matching

Paid holiday shutdown

Descripción de la vacante

AeroVironment seeks a Senior Cybersecurity Analyst to lead investigations, contain, and remediate incidents across the organization. This role serves as a technical escalation point for complex security events and coordinates response activities with IT, engineering, legal, and business stakeholders.

The ideal candidate has strong expertise in endpoint and network forensics, SIEM and EDR technologies, threat hunting, incident leadership, and security automation.

Formación

• 5+ years of incident response, security operations, or digital forensics.
• Experience leading investigations of complex incidents (ransomware, phishing, data exfiltration).
• Knowledge of incident response processes (prep, detection, analysis, containment, eradication, recovery).
• Experience with SIEM/EDR, network monitoring, vulnerability management, forensic tools.
• Scripting or automation using PowerShell, Python, Bash, or similar.

Responsabilidades

• Lead complex cybersecurity investigations from triage to closure.
• Serve as primary technical lead for escalated incidents and coordinate responses.
• Analyze endpoint, identity, email, network, and cloud telemetry to define scope and impact.
• Develop incident timelines, root cause analysis, and containment strategies.
• Maintain incident records and provide technical findings, executive summaries, and recommendations.

Conocimientos

Incident leadership

Threat hunting

Forensics

SIEM/EDR

Security automation

Communication

On-call readiness

Educación

Bachelor's degree in Cybersecurity or related field

Herramientas

SIEM platforms

EDR tools

Forensic analysis tools

Cloud telemetry

Descripción del empleo

AeroVironment seeks a Senior Cybersecurity Analyst to lead investigations, contain, and remediate incidents across the organization. This role serves as a technical escalation point for complex security events and coordinates response activities with IT, engineering, legal, and business stakeholders.

The ideal candidate has strong expertise in endpoint and network forensics, SIEM and EDR technologies, threat hunting, incident leadership, and security automation.