Senior Incident Response Investigator

U.S. Bank; Minneapolis (MN); On-site; USD 120,000 - 141,000; Full time

Benefits offered by this job

Healthcare (medical, dental, vision)

Life insurance

Disability insurance

401(k) and retirement plan

Paid vacation and holidays

Job summary

U.S. Bank is seeking a Senior Cybersecurity Incident Responder to join our Cybersecurity Incident Response team. You will investigate escalated cybersecurity events, perform hands-on analysis, and determine scope, impact, and root cause of incidents.

You will leverage SIEM and EDR platforms, conduct digital forensics, and work across endpoints, networks, and applications. A strong track record in incident handling and on-call support is required for this role.

Qualifications

• 4+ years hands-on cybersecurity Incident Response, Incident Handling, or DFIR experience.
• Experience investigating cybersecurity incidents from escalation through conclusion.
• Strong log analysis and security telemetry investigation skills.
• Hands-on experience with SIEM and EDR platforms.
• Experience with digital forensics or cyber investigations.
• Knowledge of network security concepts and activity analysis.
• Ability to reconstruct incidents from multiple technical sources.
• Ability to manage complex investigations and deliver conclusions.

Responsibilities

• Lead hands-on investigations of escalated cybersecurity events and incidents.
• Determine whether activity is a confirmed security incident.
• Analyze logs, alerts, events, and telemetry to identify malicious activity.
• Reconstruct timelines, attack vectors, scope, impact, and root cause.
• Perform digital forensics and technical analysis to support investigations.
• Use SIEM and EDR during active investigations.
• Investigate activity across endpoints, networks, apps, and security controls.
• Identify indicators of compromise and related evidence.
• Document findings with technically supported conclusions.
• Collaborate with SOC and other teams during complex incidents.
• Support containment, remediation, and recovery during incidents.
• Participate in on-call rotation approximately every 4–6 weeks.

Skills

Incident Response

Log Analysis

SIEM

EDR

Digital Forensics

Network Security

Incident Investigation

On-call Availability

Education

Bachelor's degree or equivalent

Tools

SIEM platforms

EDR technologies

Microsoft Defender

Microsoft Sentinel

Akamai security technologies

Job description

U.S. Bank is seeking a Senior Cybersecurity Incident Responder to join our Cybersecurity Incident Response team. You will investigate escalated cybersecurity events, perform hands-on analysis, and determine scope, impact, and root cause of incidents.

You will leverage SIEM and EDR platforms, conduct digital forensics, and work across endpoints, networks, and applications. A strong track record in incident handling and on-call support is required for this role.