Senior Security Incident Response Lead

Insight Global; Wilmington (DE); On-site; USD 120,000 - 180,000; Full time

Job summary

Insight Global is seeking a Senior Security Incident Responder to lead investigation, containment, eradication, and recovery of cybersecurity incidents across the enterprise.

You will serve as the technical lead during major incidents, coordinating across cybersecurity, infrastructure, cloud, legal, privacy, and business teams, and documenting findings for regulatory reporting.

The role requires 10+ years in cybersecurity with SOC/IR experience and hands-on expertise with SIEM and EDR platforms.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or related field.
• 10+ years of experience in cybersecurity, including SOC and Incident Response.
• Proven experience leading investigations of major cybersecurity incidents and security breaches.
• Strong understanding of incident response methodologies, attacker tactics, and forensic investigation techniques.
• Experience in enterprise or global environments with complex security infrastructures.
• Ability to coordinate technical and non-technical stakeholders during high-pressure incident situations.
• Experience with SIEM platforms (Microsoft Sentinel, Splunk, QRadar, Elastic, LogRhythm).
• Experience with EDR platforms (Microsoft Defender, CrowdStrike, SentinelOne, Carbon Black).
• Experience with query languages and scripting (KQL, SPL, Python, PowerShell, Bash).
• Experience with API integrations and workflow automations.
• Preferred Certifications include GCIH, GCFA, GCED, CISSP, CSA, Microsoft Security Operations Analyst, SANS IR training.

Responsibilities

• Lead investigation and response of major cybersecurity incidents including ransomware and data breaches.
• Perform triage, containment, eradication, recovery, and post-incident activities.
• Coordinate cross-functional teams during incident response across cybersecurity, infra, cloud, and legal.
• Develop and optimize incident response playbooks, runbooks, and procedures.
• Design automation and SOAR workflows to improve investigation efficiency and SOC effectiveness.
• Create and improve detection rules and use cases; drive continuous improvement via threat intel and incident trends.

Skills

IR leadership

Stakeholder comms

Incident communications

Forensic techniques

API integrations

Automation workflows

Scripting languages

Detection rules

Education

Bachelor's degree in cybersecurity or related field

Tools

Microsoft Sentinel

Splunk

QRadar

Elastic

LogRhythm

Microsoft Defender

CrowdStrike

SentinelOne

Carbon Black

KQL

SPL

Python

PowerShell

Bash

Job description

Insight Global is seeking a Senior Security Incident Responder to lead investigation, containment, eradication, and recovery of cybersecurity incidents across the enterprise.

You will serve as the technical lead during major incidents, coordinating across cybersecurity, infrastructure, cloud, legal, privacy, and business teams, and documenting findings for regulatory reporting.

The role requires 10+ years in cybersecurity with SOC/IR experience and hands-on expertise with SIEM and EDR platforms.