Senior Incident Response Analyst

Check Point Software; Dallas (TX); Vor Ort; USD 120.000 - 180.000; Vollzeit

Zusammenfassung

Check Point Software is seeking a senior cybersecurity professional to lead high‑level incident response and forensics across global customer environments. You will manage daily incidents, coordinate response efforts, and deliver clear remediation guidance.

The role emphasizes T3 IR with emphasis on system compromise analysis and proactive security planning. Responsibilities include incident playbooks, tabletop exercise scenarios, and collaboration with cross‑functional teams.

Qualifikationen

• 10+ years of cybersecurity experience with 2-5 years in T3 incident response focusing on system compromise analysis.
• Experience performing security reviews and vulnerability risk assessments of network environments.
• Proficiency with enterprise security solutions and incident crisis management.
• Experience creating procedures and documented plans for security teams.
• Willingness to participate in on-call rotations, including weekends; travel may be required.

Aufgaben

• Responsible for daily incident management of customer incidents
• Perform incident response and forensic analysis of compromised systems and provide remediation recommendations
• Direct incident response efforts, prioritize actions, and produce clear incident reports detailing vectors, attacker methods and artifacts
• Manage complex global incidents and large-scale compromise assessments for customer environments
• Build incident response plans and playbooks; create attack scenarios for tabletop exercises
• Produce detailed incident reports and communicate findings effectively to customers
• Develop and maintain sandbox/test lab environments to evaluate malware samples
• Coordinate work actions within the team and collaborate across functions

Kenntnisse

Cybersecurity experience

T3 incident response

Incident crisis management

Attack simulation

Security procedures

On-call rotation

Travel readiness

Jobbeschreibung

Why Join Us?

At Check Point, what you do matters. Every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and AI-driven threats, securing their AI transformation.

Our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and AI systems, stopping attacks before they happen.

This is where innovation meets real-world impact. You’ll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.

We’re proud to be recognized by TIME, Newsweek, and Forbes for excellence and workplace culture.

What really sets Check Point apart is the opportunity to grow, contribute, and help companies navigate their AI transformation securely.

If you’re excited to work at the forefront of AI-driven security on a global scale, this is the place to do it.

Key Responsibilities

• Responsible for daily incident management of customer incidents
• Perform incident response and forensic analysis of compromised systems, identify and provide recommendations for remediation
• Formulate and direct incident response efforts, prioritize those response efforts, and create legible incident reports that describe the compromise vector, attacker methodologies and artifacts
• Ability to manage complicated global incidents
• Ability to perform large-scale compromise assessments for customer environments
• Build incident response plans and playbooks
• Create attack scenarios for customer tabletop training exercises
• Creation of detailed incident reports for customers and effective communication of findings to customers
• Build and maintain sandbox/test lab environments to evaluate malicious code
• Work within a team environment and will be responsible for coordinating work actions

Qualifications

• This is not an entry level SOC role.
• 10+ years of cybersecurity experience out of which 2-5 years are experience performing T3 incident response with an emphasis on system compromise analysis.
• Experience of performing security reviews/vulnerability risk assessments of network environments using both manual procedures and automated analysis tools.
• Experience with enterprise security solutions, incident crisis management.
• Experience with performing attack simulation for training security teams.
• Experience with creating procedures and documented plans for security teams.
• Ability to participate in on-call rotation, including at least one weekend a month.
• Domestic and International travel may be required.
• Must be eligible to work in the US without sponsorship from an employer now or in the future.

EOE M/F/Veterans/Disabled