Senior Incident Response Lead – Global Forensics & IR

Check Point Software; Atlanta (GA); On-site; USD 140,000 - 210,000; Full time

Job summary

Check Point Software is seeking a seasoned Security Operations Center professional to lead and coordinate high‑complex cyber incident responses for global customers. You will perform forensic analysis, craft remediation guidance, and direct response efforts against sophisticated threats, including large‑scale campaigns.

The role requires 10+ years in cybersecurity with 2–5 years in T3 incident response, strong risk assessments, and the ability to communicate findings clearly to customers and

Qualifications

• This is not an entry level SOC role.
• 10+ years of cybersecurity experience, with 2-5 years in T3 incident response focusing on system compromise.
• Experience with security reviews and vulnerability risk assessments of networks using manual and automated methods.
• Experience with enterprise security solutions and incident crisis management.
• Experience with attack simulations for security team training.
• Experience creating procedures and documented plans for security teams.
• Ability to participate in on-call rotation, including at least one weekend per month.
• Domestic and international travel may be required.
• Must be eligible to work in the US without sponsorship now or in the future.

Responsibilities

• Responsible for daily incident management of customer incidents
• Perform incident response and forensic analysis of compromised systems, identify and provide recommendations for remediation
• Formulate and direct incident response efforts, prioritize those response efforts, and create legible incident reports that describe the compromise vector, attacker methodologies and artifacts
• Ability to manage complicated global incidents
• Ability to perform large-scale compromise assessments for customer environments
• Build incident response plans and playbooks
• Create attack scenarios for customer tabletop training exercises
• Creation of detailed incident reports for customers and effective communication of findings to customers
• Build and maintain sandbox/test lab environments to evaluate malicious code
• Work within a team environment and will be responsible for coordinating work actions

Skills

Senior SOC experience

T3 incident response

Vulnerability risk assessments

Attack simulations

Crisis management

Incident reporting & communication

On-call rotation

Travel flexibility

Tools

Automated analysis tools

Job description

Check Point Software is seeking a seasoned Security Operations Center professional to lead and coordinate high‑complex cyber incident responses for global customers. You will perform forensic analysis, craft remediation guidance, and direct response efforts against sophisticated threats, including large‑scale campaigns.

The role requires 10+ years in cybersecurity with 2–5 years in T3 incident response, strong risk assessments, and the ability to communicate findings clearly to customers and