Senior Incident Responder: Lead Investigator & Containment

Minerva Cyber Tech; Columbia (MD); On-site; USD 120,000 - 160,000; Full time

Job summary

Minerva Cyber Technologies is seeking a Senior Incident Responder to lead the technical response to cybersecurity incidents and help teams make sound decisions under pressure. You will coordinate rapid evidence collection and prioritize actions during high‑stakes investigations.

You will connect incident investigation findings to containment, recovery, stakeholder communication, and improvements in incident response readiness across client environments.

Qualifications

• Senior-level incident response experience coordinating complex investigations.
• Hands-on ability to interpret security telemetry and distinguish evidence from hypotheses.
• Knowledge of evidence handling, incident documentation, containment and recovery validation.
• Ability to explain uncertainty and response options to technical and nontechnical stakeholders.
• Willingness to travel to client sites as needed.

Responsibilities

• Scope security incidents, establish investigation priorities, and coordinate evidence collection.
• Analyze endpoint, identity, network, and cloud telemetry to identify attacker activity and impact.
• Recommend containment and recovery actions with system owners and decision makers.
• Maintain incident timelines, escalation updates, and clear handoffs.
• Develop incident response playbooks, support tabletop exercises, and verify lessons learned.

Skills

Senior incident response

Telemetry analysis

Stakeholder communication

Evidence handling

Incident timelines & documentation

Travel to client sites

Job description

Minerva Cyber Technologies is seeking a Senior Incident Responder to lead the technical response to cybersecurity incidents and help teams make sound decisions under pressure. You will coordinate rapid evidence collection and prioritize actions during high‑stakes investigations.

You will connect incident investigation findings to containment, recovery, stakeholder communication, and improvements in incident response readiness across client environments.