Senior Incident Response Lead — Forensics & Playbooks

Placements24; Windsor Park (TN); Hybrid; USD 55,000 - 79,000; Full time

Benefits offered by this job

Competitive salary

Health, dental, vision insurance

Pension plan

Professional development

Job summary

Placements24 seeks a Senior Incident Response Specialist to lead the investigation and remediation of security incidents within a high‑stakes environment. You will develop IR plans, perform forensic analyses, and guide mitigation efforts across teams, ensuring rapid restoration and lessons learned.

The role requires 6+ years in cybersecurity, strong knowledge of NIST SP 800-61, and hands-on experience with EnCase, FTK, and Volatility.

Qualifications

• Bachelor's degree or equivalent practical experience in CS/InfoSec.
• 6+ years in cybersecurity with emphasis on incident response and forensics.
• Proven track record leading IR for major breaches.
• Knowledge of incident response methodologies (NIST SP 800-61).
• Hands-on with forensic tools (EnCase, FTK, Volatility) and SIEMs.
• Strong networking, OS, malware analysis, and threat intel understanding.
• Excellent analytic, problem-solving and decision-making skills.
• Capable of leading under crisis and strong communication.
• Certifications such as GCIH, GCFA, CIR, CISSP are preferred.
• Willingness to work flexible hours and on-call rotation.

Responsibilities

• Lead investigations and remediation of complex security incidents.
• Develop, implement, and maintain IR plans, playbooks, and procedures.
• Perform forensic analysis of compromised systems and evidence.
• Coordinate response across teams and stakeholders during incidents.
• Conduct root cause analysis and provide recurrence-prevention recommendations.
• Monitor threat intel and identify potential risks.
• Develop and deliver IR training and awareness programs.
• Liaise with external IR partners and law enforcement.
• Stay updated with latest IR techniques, tools, and threat landscapes.
• Contribute to continuous improvement of IR capability.

Skills

Incident response

Digital forensics

NIST SP 800-61

SIEM

EnCase

FTK

Volatility

GCIH

GCFA

CISSP

CIR

Education

Bachelor's degree in Computer Science or Information Security

Tools

EnCase

FTK

Volatility

SIEM platforms

Job description

Placements24 seeks a Senior Incident Response Specialist to lead the investigation and remediation of security incidents within a high‑stakes environment. You will develop IR plans, perform forensic analyses, and guide mitigation efforts across teams, ensuring rapid restoration and lessons learned.

The role requires 6+ years in cybersecurity, strong knowledge of NIST SP 800-61, and hands-on experience with EnCase, FTK, and Volatility.