Senior Incident Response Engineer — Cloud Security

RXinsider LTD.; Philadelphia (Philadelphia County); On-site; USD 90,000 - 150,000; Full time

Job summary

Elsevier is expanding its Global InfoSec Security Incident Response team. As a Security Incident Response Engineer, you will join the internal security support group to assist with incident response investigations and remediation guidance.

You will help scope incidents, analyze data from threat tools, and coordinate responses with other security teams. The role emphasizes runbook development, containment activities, and staying current on threats and vulnerabilities.

Qualifications

• Experience in cybersecurity incident response or related fields.
• Ability to analyze, triage, scope, contain and remediate security incidents.
• Current knowledge of security tools, technologies and processes.
• Experience with cloud providers and cloud security in multi-cloud or hybrid deployments.
• Skills in automation using scripting languages.

Responsibilities

• Assist in scoping security incidents and identify indicators of attack and compromise.
• Analyze incident data from threat analytics tools.
• Communicate recommendations based on incident analysis.
• Coordinate responses with security and consulting teams.
• Develop and implement runbooks and techniques for Incident Response.
• Perform security triage and analysis on endpoints, servers, and networks.
• Contain incidents and drive short-term resolutions.
• Maintain knowledge of threat landscape and vulnerabilities.
• Investigate root causes of complex incidents.
• Maintain confidentiality.

Skills

Incident response

Threat triage

Cloud security (multi-cloud)

Automation (PowerShell, Python, Java)

Linux administration

Network security

Tools

PowerShell

Python

Java

Job description

Elsevier is expanding its Global InfoSec Security Incident Response team. As a Security Incident Response Engineer, you will join the internal security support group to assist with incident response investigations and remediation guidance.

You will help scope incidents, analyze data from threat tools, and coordinate responses with other security teams. The role emphasizes runbook development, containment activities, and staying current on threats and vulnerabilities.