Senior IT Security Incident Responder – Tier 2, Remote

Gravity IT Resources; Salem (OR); Remote; USD 109,000 - 116,000; Full time

Job summary

Gravity IT Resources is seeking an experienced IT Security Engineer IV – Incident Response to join its SOC. This role focuses on Tier 2 incident response, leveraging CrowdStrike, Splunk, and other SIEM tools to investigate complex security incidents from containment through remediation and closure.

The ideal candidate will have 5+ years of hands-on incident response experience, strong communication skills, and the ability to drive incidents in a fast-paced environment.

Qualifications

• 5+ years of experience in cybersecurity, security operations, or incident response.
• Hands-on incident responder experience in Tier 2 or escalated SOC.
• Ability to independently manage complex incidents from escalation to resolution.
• Experience with CrowdStrike and Splunk in security environments.
• Strong SIEM experience and cross-source data correlation.
• AWS security and cloud environment experience.
• Excellent written and verbal communication.
• Ability to work under pressure with multiple investigations.

Responsibilities

• Act as Tier 2 incident responder from triage through closure.
• Own escalated incidents from triage, containment, eradication, recovery, to closure.
• Investigate security events to determine true incidents based on risk and impact.
• Analyze endpoint, network, cloud telemetry to identify root cause and impact.
• Use CrowdStrike, Splunk, and SIEM tools to correlate signals.
• Correlate logs across multiple sources to detect attacker activity.
• Conduct host, network, and cloud forensic analysis as needed.
• Lead communications with security teams and stakeholders during incidents.
• Provide clear updates and communicate findings to technical and non-technical audiences.
• Collaborate with Tier 1, DFIR, Detection Engineering, and other SOC capabilities.
• Verify containment/remediation effectiveness before closing incidents.
• Contribute to incident response playbooks and runbooks.
• Participate in post-incident reviews and implement improvements.
• Stay current on attacker techniques and emerging threats.

Skills

Incident Response

SOC Operations

CrowdStrike

Splunk

AWS Security

SIEM

Tools

CrowdStrike

Splunk

ServiceNow SIR

SIEM Platforms

Job description

Gravity IT Resources is seeking an experienced IT Security Engineer IV – Incident Response to join its SOC. This role focuses on Tier 2 incident response, leveraging CrowdStrike, Splunk, and other SIEM tools to investigate complex security incidents from containment through remediation and closure.

The ideal candidate will have 5+ years of hands-on incident response experience, strong communication skills, and the ability to drive incidents in a fast-paced environment.