Senior Cybersecurity Incident Response Lead

Jobtailor; Philadelphia (Philadelphia County); On-site; USD 110,000 - 160,000; Full time

Job summary

Jobtailor is seeking a seasoned cybersecurity professional to lead incident response activities, oversee monitoring across endpoints, network, cloud, and identity platforms, and conduct advanced threat investigations. You will mentor junior analysts and help strengthen security operations, playbooks, and documentation.

The role emphasizes collaboration with IT and business units, with a focus on proactive threat hunting and risk-based remediation.

Qualifications

• Bachelor of Science and 3 to 5 years of experience, or equivalent combination of education and experience, required
• Experience investigating cybersecurity incidents and performing incident response activities
• Experience with security monitoring, endpoint detection and response, or SIEM technologies
• Knowledge of network security, operating system security, vulnerability management, and threat detection methodologies
• Strong analytical, troubleshooting, organizational, documentation, and communication skills
• Security Operations Center experience preferred
• Experience with CrowdStrike Falcon, Microsoft Defender, LogScale, Splunk, or similar technologies preferred
• Experience with forensic analysis, threat hunting, cloud security, and security automation preferred
• Relevant security certifications preferred
• Security+
• CySA+
• GCIH
• GCIA
• CISSP
• or equivalent certifications

Responsibilities

• Lead cybersecurity incident response activities, including investigation, containment, eradication, recovery, documentation, and stakeholder coordination
• Monitor, analyze, and investigate security alerts and events across endpoint, network, cloud, and identity security platforms
• Conduct threat hunting and advanced security investigations to identify malicious activity and emerging threats
• Support and maintain enterprise security monitoring technologies, endpoint security controls, and security operations infrastructure
• Perform risk assessments and vulnerability analysis and recommend remediation actions
• Deploy, maintain, and optimize security technologies and controls supporting security operations and monitoring
• Develop and maintain incident response procedures, operational playbooks, standards, and technical documentation
• Provide security consulting and guidance to IT staff, business units, and project teams
• Mentor junior analysts and facilitate knowledge sharing across the Security Operations team
• Perform additional duties as assigned

Skills

Analytical skills

Troubleshooting

Organizational skills

Documentation

Communication skills

Education

Bachelor's degree in Cybersecurity / related field

Security certifications (Security+, CySA+, GCIH, GCIA, CISSP)

Tools

CrowdStrike Falcon

Microsoft Defender

LogScale

Splunk

SIEM technologies

Job description

Jobtailor is seeking a seasoned cybersecurity professional to lead incident response activities, oversee monitoring across endpoints, network, cloud, and identity platforms, and conduct advanced threat investigations. You will mentor junior analysts and help strengthen security operations, playbooks, and documentation.

The role emphasizes collaboration with IT and business units, with a focus on proactive threat hunting and risk-based remediation.