Senior Incident Response Lead - End-to-End, Remote

North; United States; Remoto; USD 150.000 - 180.000; Tempo pieno

Descrizione del lavoro

North is seeking a Principal Incident Response Analyst to lead North’s most complex security incidents from detection through recovery, remotely from the United States. The role combines incident response, detection engineering, and threat hunting, working across the SOC, IT, and engineering teams to set technical standards and mentor others.

This senior position requires deep, hands-on expertise in forensics, EDR/XDR platforms, SIEM content, and MITRE ATT&CK-guided investigations, with emphasis

Competenze

• Bachelor's degree in a technical field or equivalent professional experience.
• 7+ years hands-on information security with incident response expertise.
• Proven track record leading complex, high-severity security incidents end-to-end.
• Experience mentoring security engineers and analysts.
• Excellent written and verbal communication with non-technical stakeholders.
• Deep, hands-on digital forensics across endpoints, networks, cloud, and identity.
• Experience with EDR/XDR platforms and log analysis.
• Strong knowledge of MITRE ATT&CK framework for incident response.
• Scripting or automation experience (Python/PowerShell) or LLМ coding tools.
• Understanding of PCI-DSS or similar compliance framework.

Mansioni

• Act as principal escalation point and lead investigator for complex incidents end-to-end.
• Triage, investigate, contain, eradicate, and recover from incidents across multiple layers.
• Lead full-scope forensic investigations and reconstruct attack timelines.
• Translate findings into narratives for engineering and leadership.
• Develop and maintain incident response playbooks and documentation.
• Lead root cause analysis and cross-team remediation.
• Coordinate with IT, legal, compliance, and executives during major incidents.
• Provide guidance to other responders during live incidents.
• Participate in on-call rotation as needed.
• Translate findings into detection enhancements bridging investigation and prevention.

Conoscenze

Incident response

Detection engineering

Threat hunting

Leadership

Mentorship

Communication

Digital forensics

EDR/XDR experience

SIEM/NG-SIEM

Cloud infrastructure (AWS/Azure/GCP)

Formazione

Bachelor's degree or equivalent

Strumenti

CrowdStrike NG-SIEM

Splunk

Microsoft Sentinel

AWS

Azure

GCP

Descrizione del lavoro

North is seeking a Principal Incident Response Analyst to lead North’s most complex security incidents from detection through recovery, remotely from the United States. The role combines incident response, detection engineering, and threat hunting, working across the SOC, IT, and engineering teams to set technical standards and mentor others.

This senior position requires deep, hands-on expertise in forensics, EDR/XDR platforms, SIEM content, and MITRE ATT&CK-guided investigations, with emphasis