Senior Incident Response Engineer – Aerospace Cyber Defender

Archer; San Jose (CA); Presencial; USD 144.000 - 180.000; Jornada completa

Descripción de la vacante

Archer, an aerospace company based in San Jose, is seeking a Senior Incident Response Engineer to lead detection and remediation across enterprise and aviation environments. You will serve as the primary technical liaison with MSSP, translating security alerts into actionable threat intelligence while ensuring compliance with NIST SP 800-171, CMMC Level 2, and SOX ITGC requirements.

This highly technical role requires hands-on investigations from detection to recovery, forensic reporting for

Formación

• 5+ years in Incident Response or SOC roles.
• OS internals across Windows, Mac, Linux.
• Automation scripting in Python/PowerShell/Bash.
• Hands-on SIEM/SOAR with Chronicle, Splunk or Sentinel.
• Threat intelligence and CTI knowledge.
• Clear written communication for regulatory stakeholders.

Responsabilidades

• MSSP liaison & alert management; validate alerts via SIEM data queries.
• Lead technical response for breaches, malware, insider threats; containment and forensics.
• Threat hunting using MITRE ATT&CK framework and EDR telemetry.
• Develop and tune detection rules; design SOAR workflows.
• Assist audits with evidence of root cause analysis and post-incident reviews.
• Lead tabletop exercises and post-incident debriefs for program improvements.

Conocimientos

IR/SOC experience

Scripting

SIEM/SOAR mastery

Threat intelligence

Communication

Herramientas

Google Chronicle

Splunk

Microsoft Sentinel

Cortex XSOAR

Phantom

Descripción del empleo

Archer, an aerospace company based in San Jose, is seeking a Senior Incident Response Engineer to lead detection and remediation across enterprise and aviation environments. You will serve as the primary technical liaison with MSSP, translating security alerts into actionable threat intelligence while ensuring compliance with NIST SP 800-171, CMMC Level 2, and SOX ITGC requirements.

This highly technical role requires hands-on investigations from detection to recovery, forensic reporting for