Senior Incident Response Engineer: Detect, Investigate, Remediate

American Technology Services LLC; Atlanta (GA); On-site; USD 110,000 - 165,000; Full time

Job summary

American Technology Services LLC in Atlanta, GA, is seeking an Incident Response Engineer to join our Cybersecurity team. The role focuses on incident detection and response across Windows, Linux, iOS, and cloud platforms, coordinating with cross-functional teams to enhance detection capabilities and response playbooks.

You will analyze logs/EDR telemetry, participate in post-mortems, and drive proactive threat hunting while supporting on-call rotations and the overall security program.

Qualifications

• Bachelor’s degree in a related field or equivalent experience.
• 6+ years of experience in cybersecurity, including incident handling/response.
• Familiarity with MITRE ATT&CK and ITIL frameworks; strong understanding of cybersecurity tools and methodologies.
• Excellent written and verbal communication skills; ability to convey technical concepts to non-technical audiences.

Responsibilities

• Serve as a primary responder to security incidents, monitoring, triaging, and investigating alerts.
• Collaborate with cross-functional teams to document and coordinate incident response processes.
• Create and maintain incident response playbooks; lead post-mortems and distill actionable lessons.
• Analyze logs/EDR telemetry across Windows, Linux, iOS, and cloud platforms using SIEM tools.
• Contribute to threat hunting and assess evolving threats using threat intelligence.

Skills

Cybersecurity experience

Communication skills

Risk management

Education

Bachelor’s degree in a related field or equivalent experience

Cybersecurity certifications preferred

Job description

American Technology Services LLC in Atlanta, GA, is seeking an Incident Response Engineer to join our Cybersecurity team. The role focuses on incident detection and response across Windows, Linux, iOS, and cloud platforms, coordinating with cross-functional teams to enhance detection capabilities and response playbooks.

You will analyze logs/EDR telemetry, participate in post-mortems, and drive proactive threat hunting while supporting on-call rotations and the overall security program.