Senior Incident Response Lead: Detection & Threat Hunting

Peraton; Northern (KY); Hybrid; USD 104,000 - 166,000; Full time

Job summary

Peraton Labs is hiring a Senior Incident Response Analyst to lead hands-on incident response for the Covered California and CalHEERS environments, own detection engineering and threat hunting, and serve as backup incident manager in coordination with the client's Information Security Officer and our Security Services Manager. You will carry the primary on-call rotation.

You will work with Covered California security leadership, infrastructure and application teams, our on-site security

Qualifications

• Bachelor's degree in cybersecurity or computer science; or 4 extra years of relevant experience in lieu of a degree.
• 8+ years of cybersecurity experience with hands-on incident response leadership.
• Active GCIH or GCIA certification.
• Hands-on experience with enterprise SIEM and SOAR platforms (Splunk, MS Sentinel) including detection engineering and alert tuning.
• Threat hunting experience using MITRE ATT&CK; malware triage and network/host forensics.
• Experience leading incidents as the incident lead; evidence handling and post-incident reporting.
• Knowledge of NIST SP 800-61 and related controls; scripting for automation.

Responsibilities

• Lead end-to-end incident response; triage, containment, eradication, recovery, and post-incident reviews.
• Build and exercise incident response playbooks and runbooks.
• Own detection and monitoring; drive SIEM/SOAR content and log onboarding.
• Hunt proactively; map to MITRE ATT&CK and turn findings into detections.
• Coordinate investigations; manage evidence handling, chain of custody, and reporting.
• Meet tight notification obligations and support vulnerability management.

Skills

Incident response leadership

SIEM/SOAR engineering

Threat hunting

MITRE ATT&CK

Evidence handling

Scripting for automation

NIST SP 800-61 knowledge

US Citizenship

Education

Bachelor's degree in cybersecurity or computer science

Tools

Splunk

Microsoft Sentinel

Job description

Peraton Labs is hiring a Senior Incident Response Analyst to lead hands-on incident response for the Covered California and CalHEERS environments, own detection engineering and threat hunting, and serve as backup incident manager in coordination with the client's Information Security Officer and our Security Services Manager. You will carry the primary on-call rotation.

You will work with Covered California security leadership, infrastructure and application teams, our on-site security