Senior Incident Response Lead: Global Forensics & Playbooks

Check Point Software; United States; Remote; USD 150,000 - 190,000; Full time

Job summary

Check Point Software, based in the United States, seeks an experienced Senior Incident Response Lead to manage daily customer incident workflows, perform forensic analysis, and guide remediation efforts across global environments.

The role requires 10+ years in cybersecurity with 2-5 years in T3 incident response, strong assessment and crisis management skills, and readiness to travel. This position is not entry level and demands clear, technical reporting and coordination within a team.

Qualifications

• Minimum 10+ years in cybersecurity with 2–5 years in T3 incident response.
• Experience performing security reviews and vulnerability risk assessments.
• Experience with enterprise security solutions and incident crisis management.
• Ability to travel domestically and internationally.
• Eligibility to work in the US without sponsorship.

Responsibilities

• Responsible for daily incident management of customer incidents.
• Perform incident response and forensic analysis of compromised systems, identify and provide recommendations for remediation.
• Formulate and direct incident response efforts, prioritize those response efforts, and create legible incident reports that describe the compromise vector, attacker methodologies and artifacts.
• Ability to manage complicated global incidents.
• Ability to perform large-scale compromise assessments for customer environments.
• Build incident response plans and playbooks.
• Create attack scenarios for customer tabletop training exercises.
• Creation of detailed incident reports for customers and effective communication of findings to customers.
• Build and maintain sandbox/test lab environments to evaluate malicious code.
• Work within a team environment and will be responsible for coordinating work actions.
• This is not an entry level SOC role.
• 10+ years of cybersecurity experience out of which 2-5 years are experience performing T3 incident response with an emphasis on system compromise analysis.
• Experience of performing security reviews/vulnerability risk assessments of network environments using both manual procedures and automated analysis tools.
• Experience with enterprise security solutions, incident crisis management.
• Experience with performing attack simulation for training security teams.
• Experience with creating procedures and documented plans for security teams.
• Ability to participate in on-call rotation, including at least one weekend a month.
• Domestic and International travel may be required.
• Must be eligible to work in the US without sponsorship from an employer now or in the future.

Skills

Incident management

Forensic analysis

Threat hunting

IR planning

Communication

Team coordination

Education

Bachelor's degree in Cybersecurity

Tools

SIEM experience

Forensic tooling

Job description

Check Point Software, based in the United States, seeks an experienced Senior Incident Response Lead to manage daily customer incident workflows, perform forensic analysis, and guide remediation efforts across global environments.

The role requires 10+ years in cybersecurity with 2-5 years in T3 incident response, strong assessment and crisis management skills, and readiness to travel. This position is not entry level and demands clear, technical reporting and coordination within a team.