Senior Cybersecurity Incident Response Engineer

ConsultNet Technology Services and Solutions; Chicago (IL); On-site; USD 130,000 - 160,000; Full time

Job summary

ConsultNet Technology Services and Solutions in Chicago is seeking a Senior Cybersecurity Engineer to lead incident response, cyber recovery, forensics, and security hardening across on‑prem and cloud environments.

You will design secure recovery environments, perform root cause analyses, and mentor junior engineers while coordinating with cross-functional teams on technology roadmaps and security controls. Hands-on, analytical, and capable of managing active incidents are essential.

Qualifications

• Strong hands-on experience with cybersecurity incident response and incident handling.
• Experience leading complex or large-scale cybersecurity incidents.
• Experience with clean room, isolated recovery, or secure cyber recovery environments.
• Experience supporting ransomware recovery and cyber resilience programs.
• Hands-on forensic investigation experience involving endpoints, networks, cloud environments, or security logs.
• Strong experience with SIEM platforms and log analysis.
• Experience conducting root cause analysis and communicating findings to technical and executive audiences.
• Strong understanding of system, network, application, and infrastructure security hardening.
• Experience working with a combination of on-premises and cloud environments.
• Understanding of MITRE Telecommunication and Cyber Kill Chain frameworks.
• Familiarity with CI/CD environments and modern application delivery practices.
• Ability to document and automate repetitive security tasks, workflows, and incident response playbooks.
• Strong analytical and problem-solving skills.
• Ability to work independently and manage multiple priorities during active security incidents.

Responsibilities

• Lead cybersecurity incident response, investigation, containment, eradication, and recovery efforts.
• Design and maintain clean room and isolated recovery environments for secure system restoration following cyber incidents.
• Perform root cause analysis and recommend corrective actions following security incidents.
• Conduct forensic analysis across endpoints, networks, cloud environments, and security logs.
• Identify security vulnerabilities and recommend improvements to strengthen systems, applications, and infrastructure.
• Support cybersecurity hardening and cyber resilience initiatives.
• Analyze SIEM data, security alerts, trends, patterns, and anomalies.
• Develop and improve incident response procedures, playbooks, and automated security processes.
• Apply security frameworks such as MITRE Telecommunication CK and Cyber Kill Chain to threat detection and incident response.
• Assess, implement, configure, and support cybersecurity technologies and security controls.
• Support security technologies including IAM, DLP, vulnerability management, threat management, intrusion detection, and incident response platforms.
• Work with internal teams to incorporate cybersecurity requirements into technology projects and environments.
• Develop technology roadmaps and recommendations for supported cybersecurity tools.
• Serve as a cybersecurity subject matter expert for technical projects and initiatives.
• Mentor and provide technical guidance to less experienced cybersecurity team members.
• Work with cybersecurity vendors and technology partners as needed.
• Participate in an on-call rotation and support major cybersecurity incidents when required.

Skills

Incident response

Forensic analysis

Cloud security

SIEM analysis

Security hardening

Incident leadership

Tools

SIEM platforms

Job description

ConsultNet Technology Services and Solutions in Chicago is seeking a Senior Cybersecurity Engineer to lead incident response, cyber recovery, forensics, and security hardening across on‑prem and cloud environments.

You will design secure recovery environments, perform root cause analyses, and mentor junior engineers while coordinating with cross-functional teams on technology roadmaps and security controls. Hands-on, analytical, and capable of managing active incidents are essential.