Senior Incident Response Lead - Detect, Contain & Recover

Hogan Lovells; Washington (District of Columbia); On-site; USD 135,000 - 175,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) retirement plan

Paid time off

Job summary

Hogan Lovells Cadwalder looks for an experienced cybersecurity professional to join the Security Operations team in Washington, D.C. You will lead incident response, investigations, and detection improvements across endpoints, cloud, and identity.

The role emphasizes collaboration with security, technology, legal, privacy, risk, and business teams to strengthen defenses. The position requires 6+ years in incident response or related disciplines, strong SIEM/EDR skills, and experience with

Qualifications

• Six+ years of related cybersecurity experience, including incident response and security operations.
• Experience across endpoint, identity, network, cloud, email, and SaaS environments.
• Strong detections, log analysis, and incident investigation skills.

Responsibilities

• Lead incident response activities from triage to post-incident analysis.
• Investigate security events across enterprise environments (endpoint, cloud, identity, network, email, SaaS).
• Perform threat hunting and forensic investigations to identify malicious activity.
• Develop detection logic, alerts, playbooks, workflows, and automation to improve response.
• Serve as a senior escalation point for complex security incidents.
• Mentor team members and help mature the security operations program.

Skills

Incident response

Threat hunting

Log analysis

Communication

Problem solving

Mentoring

Education

Bachelor's degree in information technology, computer science, cybersecurity, or equivalent experience

Tools

SIEM

EDR/XDR platforms

SOAR

PowerShell

Python

KQL

Job description

Hogan Lovells Cadwalder looks for an experienced cybersecurity professional to join the Security Operations team in Washington, D.C. You will lead incident response, investigations, and detection improvements across endpoints, cloud, and identity.

The role emphasizes collaboration with security, technology, legal, privacy, risk, and business teams to strengthen defenses. The position requires 6+ years in incident response or related disciplines, strong SIEM/EDR skills, and experience with