Senior Incident Response Leader | Threat Hunting & Detection

Peraton Labs; United States; On-site; USD 104,000 - 166,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Life insurance

Health Savings Account (HSA)

Disability insurance (short/long term)

Employee Assistance Program (EAP)

Parental leave

401(k)

Paid time off and holidays

Job summary

Peraton Labs is seeking a Senior Incident Response Analyst to lead hands-on incident response for the California environment, own detection engineering and threat hunting, and serve as backup incident manager in coordination with the client security team. You will handle on-call rotations and work with security leadership, infrastructure, and forensics teams.

The role focuses on incidents involving PII, PHI, and federal tax information, with tight regulatory timelines and cross-functional

Qualifications

• 8+ years of cybersecurity experience with hands-on incident response leadership.
• Active GCIH or GCIA certification.
• Experience with enterprise SIEM and SOAR platforms and detection engineering.

Responsibilities

• Lead incident response end to end, triage, containment, eradication, recovery, and post-incident reviews.
• Build and exercise incident response playbooks and runbooks via drills.
• Own detection and monitoring; drive SIEM and SOAR content, log onboarding, and alert tuning.
• Conduct threat hunting mapped to MITRE ATT&CK and turn findings into detections.
• Coordinate evidence handling, chain of custody, escalation, and post-incident reporting.

Skills

Incident response leadership

Threat hunting

MITRE ATT&CK

Scripting for automation

NIST SP 800-61 knowledge

Education

Bachelor's degree in cybersecurity or computer science

Tools

Splunk

Microsoft Sentinel

SOAR platforms

SIEM

Job description

Peraton Labs is seeking a Senior Incident Response Analyst to lead hands-on incident response for the California environment, own detection engineering and threat hunting, and serve as backup incident manager in coordination with the client security team. You will handle on-call rotations and work with security leadership, infrastructure, and forensics teams.

The role focuses on incidents involving PII, PHI, and federal tax information, with tight regulatory timelines and cross-functional