Senior Incident Responder & IR Lead

TENEX.AI; Kansas City (MO); On-site; USD 140,000 - 210,000; Full time

Job summary

TENEX.AI is seeking a Senior Incident Responder to lead investigations, contain threats, and guide customers through critical security moments. You’ll own escalations end-to-end and help shape IR practices as the team grows.

Collaborate with Detection Engineering and Software Engineering to close gaps, mentor SOC analysts, and develop ready-to-use response playbooks and data collection tools. This role emphasizes in-person collaboration in a fast-growing MDR environment.

Qualifications

• 5+ years in incident response with at least 2 years as a tier 3 analyst.
• 2 years experience handling incidents end-to-end.
• Deep knowledge of attacker techniques, forensics, and modern detection tooling (SIEM/SOAR, EDR).
• Cloud incident response experience across AWS, GCP, or Azure.
• Ability to communicate clearly with both technical teams and customers.

Responsibilities

• Lead incident investigations from detection through containment, eradication, and recovery.
• Drive customer response as a strategic advisor during active incidents.
• Improve response playbooks by turning lessons into repeatable procedures.
• Design and build data collection and preservation toolkit with engineering to automate processes.
• Build and deliver the custom incident response readiness assessment program.
• Partner across Detection Engineering, Forward Deployment, and Software Engineering to close gaps.
• Mentor the SOC analysts to raise investigation quality.

Skills

Incident response

Client interaction

Communication

Education

Bachelor's degree in CS/Security

Relevant certifications (GCIH/GCFA/GCIA/CISSP)

Tools

SIEM

SOAR

EDR

Job description

TENEX.AI is seeking a Senior Incident Responder to lead investigations, contain threats, and guide customers through critical security moments. You’ll own escalations end-to-end and help shape IR practices as the team grows.

Collaborate with Detection Engineering and Software Engineering to close gaps, mentor SOC analysts, and develop ready-to-use response playbooks and data collection tools. This role emphasizes in-person collaboration in a fast-growing MDR environment.