Senior Incident Response Engineer (Tier 2) – Remote

Gravity IT Resources; San Diego (CA); Hybrid; USD 109,000 - 116,000; Full time

Job summary

Gravity IT Resources is seeking an IT Security Engineer IV – Incident Response to join its SOC in Threat Operations. The role focuses on investigating and resolving complex security incidents from escalation through containment and closure, requiring hands-on incident response in a Tier 2 SOC environment.

The successful candidate will analyze endpoints, networks, and cloud telemetry using CrowdStrike, Splunk, and other SIEM/EDR platforms, coordinate with cross-functional teams, and drive

Qualifications

• 5+ years of experience in cybersecurity, security operations, incident response, or a closely related field.
• Strong hands-on experience as an incident responder, preferably in Tier 2 or escalated SOC.
• Demonstrated ability to independently manage complex security incidents from escalation through resolution.
• Strong experience with CrowdStrike and Splunk in a security operations or incident response environment.
• Strong experience with SIEM platforms and correlating signals across multiple data sources.
• Strong AWS security and cloud environment experience.

Responsibilities

• Act as a Tier 2 incident responder managing and driving complex security incidents through resolution.
• Take ownership of escalated incidents from initial triage through containment, eradication, recovery and closure.
• Investigate security events to determine true incidents based on complexity, risk, scope, and business impact.
• Analyze endpoint, network, cloud, and security telemetry to determine root cause and impact.
• Lead communications and coordinate response with security teams and stakeholders.
• Validate containment and remediation effectiveness and close incidents accordingly.
• Develop and improve incident response playbooks and runbooks.

Skills

Incident responder

CrowdStrike

Splunk

AWS security

SIEM platforms

Incident response

Tools

SIEM/EDR platforms

Job description

Gravity IT Resources is seeking an IT Security Engineer IV – Incident Response to join its SOC in Threat Operations. The role focuses on investigating and resolving complex security incidents from escalation through containment and closure, requiring hands-on incident response in a Tier 2 SOC environment.

The successful candidate will analyze endpoints, networks, and cloud telemetry using CrowdStrike, Splunk, and other SIEM/EDR platforms, coordinate with cross-functional teams, and drive