Senior Incident Response Lead — Hybrid & Cloud

Archer; Raleigh (NC); On-site; USD 105,000 - 175,000; Full time

Job summary

Archer seeks a Principal Incident Response Lead to drive enterprise incident response across hybrid environments, serving as the senior incident commander and technical authority for high-severity events. You will guide escalations, containment, and recovery, aligning with executive leadership and security governance.

This role emphasizes advancing cloud-native detection and monitoring, especially within AWS, and owning the readiness lifecycle through tabletop exercises, cyber range events, and

Qualifications

• 10+ years of IT security experience, including incident response leadership in enterprise environments.
• BS Engineering/Computer Science or equivalent required; advanced degree preferred.
• Preferred: incident handling/forensics‑focused certifications (e.g., GCIH, GCFA or equivalent) and cloud security certification(s) (AWS/Azure/GCP).

Responsibilities

• Serve as the senior incident commander and technical lead for high‑severity incidents; drive structured triage, containment, eradication, and recovery across the enterprise.
• Lead and coordinate incident response efforts for high‑severity events spanning hybrid and multi‑cloud environments (on‑prem, AWS, Azure, GCP).
• Own and continuously improve the incident response program: playbooks/runbooks, severity definitions, escalation paths, on‑call expectations, evidence handling standards, and crisis communications patterns.

Skills

Incident response leadership

Executive communication

Hybrid cloud security

Triage and containment

Forensics awareness

Education

BS Engineering/Computer Science or equivalent

Advanced degree preferred

Tools

GCIH/GCFA certifications

AWS/Azure/GCP security certifications

Cloud security certifications

Job description

Archer seeks a Principal Incident Response Lead to drive enterprise incident response across hybrid environments, serving as the senior incident commander and technical authority for high-severity events. You will guide escalations, containment, and recovery, aligning with executive leadership and security governance.

This role emphasizes advancing cloud-native detection and monitoring, especially within AWS, and owning the readiness lifecycle through tabletop exercises, cyber range events, and