Senior Cybersecurity Incident Response Lead

AV; Simi Valley (CA); On-site; USD 101,000 - 153,000; Full time

Benefits offered by this job

Medical benefits

401K with company match

9/80 work schedule

Paid holiday shutdown

Job summary

AV is seeking a Senior Cybersecurity Analyst to lead investigations, containment, and remediation of security incidents across the organization. You will serve as a technical escalation point, coordinating with IT, engineering, legal, and stakeholders and guiding junior analysts.

The ideal candidate brings strong endpoint and network forensics, SIEM/EDR proficiency, and experience leading incident response in regulated environments. You will mentor teammates and drive automation and playbooks.

Qualifications

• 5+ years in cybersecurity incident response, security operations, forensics, or related field.
• Experience leading investigations of ransomware, phishing, credential theft, insider threats, data exfiltration.
• Knowledge of incident response lifecycle: prep, detect, analyze, contain, eradicate, recover.
• Proficiency with SIEM/EDR, network monitoring, and forensic tools.
• Ability to write clear incident reports, summaries, and after-action notes.

Responsibilities

• Lead complex cybersecurity investigations from triage to remediation and closure.
• Escalate incidents as primary technical lead and coordinate across teams.
• Analyze various telemetry to determine scope, vectors, and impact.
• Develop incident timelines, identify root causes and indicators of compromise.
• Preserve digital evidence per chain-of-custody procedures.
• Coordinate containment with IT, engineering, and stakeholders.
• Investigate phishing, account compromise, malware, ransomware, and insider threats.
• Use SIEM/EDR platforms to correlate alerts and validate findings.
• Conduct threat hunting based on findings and threat intelligence.
• Maintain incident records and provide executive summaries and recommendations.
• Lead post-incident reviews and drive corrective actions.
• Develop playbooks, response procedures, and evidence-collection guidance.
• Mentor analysts and participate in on-call rotations.

Skills

Incident response leadership

Cybersecurity investigations

Endpoint forensics

SIEM/EDR expertise

Threat hunting

Documentation & reporting

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science

Certifications such as CISSP/GCIH/GCFE/GCFA

Tools

Microsoft Sentinel

Microsoft Defender

PowerShell

Python

Bash

Job description

AV is seeking a Senior Cybersecurity Analyst to lead investigations, containment, and remediation of security incidents across the organization. You will serve as a technical escalation point, coordinating with IT, engineering, legal, and stakeholders and guiding junior analysts.

The ideal candidate brings strong endpoint and network forensics, SIEM/EDR proficiency, and experience leading incident response in regulated environments. You will mentor teammates and drive automation and playbooks.