Senior Cybersecurity Incident Responder

Forensic Focus; Charlotte (NC); Sur place; USD 90 000 - 130 000; Plein temps

Résumé du poste

Forensic Focus seeks an experienced incident responder to lead escalated investigations beyond initial SOC triage. You will analyze logs, telemetry, and forensic evidence across endpoints, networks, and applications to determine attack vectors, scope, and root cause.

The role requires 4+ years of hands-on incident response with strong skills in SIEM and EDR, log analysis, and network security concepts, and involves on-call rotations for significant incidents outside normal hours.

Qualifications

• Requires four or more years of hands-on incident response, incident handling, or DFIR experience.
• Strong skills in analyzing logs and telemetry, and identifying indicators of compromise.

Responsabilités

• Lead hands-on investigation of escalated cybersecurity incidents beyond initial SOC triage.
• Analyze logs, telemetry, and forensic evidence across endpoints, networks, web apps, and firewalls to determine attack vectors, scope and root cause.

Connaissances

SIEM

EDR

Log analysis

Network security

Indicators of compromise

Incident reconstruction

Outils

SIEM platforms

EDR platforms

Description du poste

The Role

This position leads hands-on investigation of escalated cybersecurity incidents beyond initial SOC triage, analyzing logs, telemetry, and forensic evidence across endpoints, networks, web applications, and firewalls to determine attack vectors, scope, and root cause, while documenting findings and supporting containment efforts.

Skills & Experience

Requires four or more years of hands-on incident response, incident handling, or DFIR experience, with strong skills in SIEM and EDR platforms, log analysis, network security concepts, identifying indicators of compromise, and reconstructing complex security incidents independently.

Who It Suits

Suited to an experienced incident responder comfortable working independently on complex investigations, collaborating with SOC teams, and participating in on-call rotations to support significant cybersecurity incidents outside normal hours.