Senior Cybersecurity Incident Response Lead

U.S. Bank; Irving (TX); On-site; USD 120,000 - 141,000; Full time

Benefits offered by this job

Healthcare (medical, dental, vision)

401(k) plan

Paid vacation

Disability insurance

Sick leave

Job summary

U.S. Bank is seeking a Senior Cybersecurity Incident Responder to join our Incident Response team. You will investigate escalated cybersecurity events, perform hands-on analysis, and determine scope, impact, and root cause of incidents.

The role requires senior hands-on experience and the ability to independently drive investigations to resolution. The position involves analyzing logs, leveraging SIEM/EDR, and coordinating with SOC analysts.

Qualifications

• 4+ years in cybersecurity Incident Response, IR/DFIR experience.
• Investigate incidents from escalation through conclusion.
• Strong log analysis and telemetry investigation skills.
• Experience with SIEM platforms and EDR technologies.
• Experience with digital forensics and cyber investigations.
• Able to manage complex incident investigations independently.
• Willing to participate in on-call rotation.

Responsibilities

• Lead hands-on investigations of escalated cybersecurity events.
• Determine if activity is a confirmed incident.
• Analyze security logs, alerts, and telemetry.
• Reconstruct timelines, attack vectors, scope and root cause.
• Perform digital forensics and technical analysis.
• Use SIEM and EDR during active investigations.
• Investigate activity across endpoints, networks, apps, and firewalls.
• Identify indicators of compromise and evidence.
• Document findings and communicate conclusions.
• Collaborate with SOC and security teams during incidents.
• Support containment, remediation, and recovery activities.
• Participate in on-call rotation ~ every 4–6 weeks.

Skills

Incident Response

DFIR

SIEM

EDR

Forensics

Log Analysis

On-call

Network Security

Education

Bachelor's degree

Tools

SIEM

EDR

Forensics tools

Job description

U.S. Bank is seeking a Senior Cybersecurity Incident Responder to join our Incident Response team. You will investigate escalated cybersecurity events, perform hands-on analysis, and determine scope, impact, and root cause of incidents.

The role requires senior hands-on experience and the ability to independently drive investigations to resolution. The position involves analyzing logs, leveraging SIEM/EDR, and coordinating with SOC analysts.