Senior Cybersecurity Incident Response Lead

U.S. Bank; Charlotte (NC); On-site; USD 120,000 - 141,000; Full time

Benefits offered by this job

Healthcare (medical, dental, vision)

401(k) company match

Paid vacation

Paid holidays

Parental leave

Adoption assistance

Sick leave

Job summary

U.S. Bank is seeking a Senior Cybersecurity Incident Responder to join the Cybersecurity Incident Response team. The role investigates escalated cybersecurity events, performs hands-on analysis, and determines root cause and impact across endpoints, networks, and applications.

The position requires 4+ years of hands-on IR/DFIR experience, strong log analysis, and experience with SIEM/EDR tools. Location-based in-person work is required three days per week in a U.S. Bank location.

Qualifications

• This role requires 4+ years of hands-on cybersecurity incident response or DFIR experience.
• It requires experience investigating incidents from escalation through resolution.
• It requires strong security log analysis and telemetry investigation skills.
• It requires hands-on experience with SIEM and EDR platforms.

Responsibilities

• Lead hands-on investigation of escalated cybersecurity events and incidents.
• Determine whether activity constitutes a confirmed cybersecurity incident.
• Analyze logs, alerts, and telemetry to identify malicious activity.
• Reconstruct incident timelines including attack vectors, scope, and root cause.
• Perform digital forensics and technical analysis to support investigations.
• Use SIEM and EDR platforms during active investigations.
• Investigate activity across endpoints, networks, web apps, and firewalls.
• Identify indicators of compromise and evidence of malicious activity.
• Document findings and communicate technically supported conclusions.
• Collaborate with SOC and other teams; assist containment and recovery.
• Participate in on-call rotation roughly every 4–6 weeks.

Skills

4+ years IR/DFIR experience

log analysis

SIEM experience

EDR experience

forensics investigations

ability to work independently

on-call rotation readiness

Education

Bachelor's degree or equivalent

Tools

SIEM

EDR

Microsoft Sentinel

Microsoft Defender

Akamai security

Job description

U.S. Bank is seeking a Senior Cybersecurity Incident Responder to join the Cybersecurity Incident Response team. The role investigates escalated cybersecurity events, performs hands-on analysis, and determines root cause and impact across endpoints, networks, and applications.

The position requires 4+ years of hands-on IR/DFIR experience, strong log analysis, and experience with SIEM/EDR tools. Location-based in-person work is required three days per week in a U.S. Bank location.