Senior Incident Response Lead & Forensics Engineer

Heartland Technology Group; Plymouth (MN); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive Compensation Package

Growth Opportunities

Community Involvement

Personal Development

Work Life Balance

Recognition and Awards

Green Initiatives

Employee and Family Celebrations

Job summary

Heartland Technology Group is seeking an experienced security Incident Response professional to lead IR engagements, perform forensic analysis, and advise on security solutions for clients. The role includes acting as a Virtual Security Engineer (vSE), mentoring colleagues, and contributing to new cybersecurity offerings.

Ideal candidates bring 8+ years in IT, strong AD/Azure experience, and a team-first, professional approach, with on-call duties and a clear focus on outcomes and client success.

Qualifications

• 8+ years of related IT experience.
• 3+ years of AD and Azure experience.
• Bachelor’s degree or equivalent experience.
• Maintain an outcome focused mindset.
• Have strong prioritization skills.
• Always be a team player.
• Carry a professional attitude and respectful demeanor.

Responsibilities

• Lead Incident Response cases from beginning to end, providing consulting and remediation efforts.
• Perform forensic analysis to identify systems artifacts used as evidence.
• Serve as a Virtual Security Engineer (vSE) for customers.
• Advise on and deploy security technical solutions and perform security assessments.
• Collaborate with Practice Manager to identify and develop new offerings.
• Support on-call coverage for 24x7 IR services.
• Meet annual billable hour goals.

Skills

Outcome-focused mindset

Prioritization skills

Team player

Professional demeanor

Education

Bachelor's degree or equivalent experience

Tools

Active Directory

Azure

Job description

Heartland Technology Group is seeking an experienced security Incident Response professional to lead IR engagements, perform forensic analysis, and advise on security solutions for clients. The role includes acting as a Virtual Security Engineer (vSE), mentoring colleagues, and contributing to new cybersecurity offerings.

Ideal candidates bring 8+ years in IT, strong AD/Azure experience, and a team-first, professional approach, with on-call duties and a clear focus on outcomes and client success.