Senior Global CSIRT Incident Response Engineer

Synopsys Inc; Raleigh (NC); On-site; USD 150,000 - 210,000; Full time

Job summary

Synopsys Inc seeks an experienced Senior Security Incident Responder to join a globally dispersed CSIRT team. You will lead investigations, coordinate containment, and partner with forensics and threat intelligence across time zones to protect critical infrastructure.

In this role you will deploy new tools, tune detections, and drive proactive security projects while translating complex findings into actionable guidance for stakeholders.

Qualifications

• 7+ years of hands-on cybersecurity investigation and incident response experience, including leading or significantly contributing to high-criticality incident investigations
• Experience investigating active security incidents with scope determination, containment coordination, and cross-functional response

Responsibilities

• Investigate high-criticality cybersecurity incidents from detection through containment, coordinating response across global teams
• Work with third-party forensic providers during significant investigations, manage handoffs and time-zone continuity
• Collaborate with Detection Engineering and Threat Intelligence to improve alert quality and enrich detections
• Deploy security tools and capabilities across endpoint, cloud, and email environments (CrowdStrike, Wiz, Proofpoint, Abnormal)
• Develop and tune detections to reduce noise and improve resilience of response playbooks
• Coordinate incident response activities with non-security teams during major investigations
• Architect and implement security solutions and tooling previously unused by the team

Skills

Incident response

Cross-functional teamwork

Threat intelligence

Detection engineering

Security automation

Power Automate

Vendor coordination

Tools

CrowdStrike

Wiz

Proofpoint

Abnormal

Job description

Synopsys Inc seeks an experienced Senior Security Incident Responder to join a globally dispersed CSIRT team. You will lead investigations, coordinate containment, and partner with forensics and threat intelligence across time zones to protect critical infrastructure.

In this role you will deploy new tools, tune detections, and drive proactive security projects while translating complex findings into actionable guidance for stakeholders.