Senior Cybersecurity Incident Leader & Threat Hunter

AV; United States; Hybrid; USD 91,000 - 155,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) with company match

Flexible work schedule options

9/80 work schedule and paid holiday

Job summary

AeroVironment is seeking a Senior Cybersecurity Analyst to lead investigations, coordinate responses, and provide expert guidance across security teams. You will analyze diverse telemetry, develop timelines, and drive remediation efforts in a hybrid office environment.

The ideal candidate brings 5+ years in incident response, strong knowledge of SIEM/EDR, and proficiency in scripting to automate tasks. Collaboration with IT, legal, and business stakeholders is essential.

Qualifications

• 5+ years of experience in cybersecurity incident response, security operations, digital forensics, or related discipline.
• Experience leading investigations of complex security incidents including ransomware, phishing, account compromise, insider threats.
• Knowledge of incident response lifecycle and frameworks (NIST IRF, MITRE ATT&CK, Cyber Kill Chain).
• Experience with SIEM, EDR, network monitoring, vulnerability management, and forensic tools.
• Proficiency analyzing OS logs, auth logs, network traffic, endpoint telemetry, and cloud security events.
• Scripting/automation with PowerShell, Python, Bash.
• Ability to write clear incident reports and executive summaries.
• Willingness to participate in on-call rotation and handle high-severity incidents.
• Strong communication, analytical, and leadership skills.

Responsibilities

• Lead complex cybersecurity investigations from triage to containment, eradication, and closure with thorough documentation.
• Serve as primary technical lead for escalated security incidents across analysts and teams.
• Analyze telemetry to determine incident scope, attack vectors, assets affected, and business impact.
• Develop incident timelines, identify root causes, persistence, lateral movement, and IOC.
• Preserve and analyze digital evidence per evidence-handling and chain-of-custody procedures.
• Coordinate containment and remediation with IT, engineering, and business stakeholders.
• Investigate phishing, account compromise, malware, ransomware, data exfiltration, and insider threats.
• Use Microsoft Sentinel, Defender, and other platforms to correlate alerts and validate findings.
• Conduct threat hunting based on findings and threat intel.
• Maintain incident records and provide executive summaries and recommendations.
• Escalate significant incidents and coordinate with leadership, Legal, HR, Privacy, and Compliance.
• Lead post-incident reviews and track corrective actions.
• Develop and maintain playbooks, response procedures, and evidence collection guidance.
• Mentor analysts and improve detection and response through reviews and exercises.
• Participate in on-call rotation and after-hours response as required.

Skills

Endpoint forensics

Network forensics

SIEM

EDR

Threat hunting

Incident leadership

Security automation

PowerShell

Python

Bash

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Microsoft Sentinel

Microsoft Defender

Security platforms

Job description

AeroVironment is seeking a Senior Cybersecurity Analyst to lead investigations, coordinate responses, and provide expert guidance across security teams. You will analyze diverse telemetry, develop timelines, and drive remediation efforts in a hybrid office environment.

The ideal candidate brings 5+ years in incident response, strong knowledge of SIEM/EDR, and proficiency in scripting to automate tasks. Collaboration with IT, legal, and business stakeholders is essential.