Engineer I - Cyber Incident Response

Overview

Engineer I - Cyber Incident Response is a junior SOC role responsible for detecting, investigating, and responding to cybersecurity incidents.

What you'll do

• Investigate and respond to incidents such as phishing, malware, ransomware, and unauthorized access attempts.
• Analyze logs, alerts, and forensic data to determine incident scope and impact.
• Escalate complex or high-severity incidents and provide documentation and evidence.
• Support containment, eradication, and recovery activities during incident response.
• Develop and maintain SOC playbooks, runbooks, and standard operating procedures.
• Collaborate with threat intelligence, vulnerability management, and forensics teams to strengthen detection and response.

What you'll need

• 2+ years of progressive cybersecurity experience with SOC operations or incident response knowledge.
• Strong knowledge of incident response methodology and adversary tactics.
• Familiarity with NIST, MITRE ATT&CK, and ISO 27035 frameworks.
• Hands-on experience with SIEM, EDR, and forensic tools (e.g., Splunk, CrowdStrike, Wireshark).
• Ability to analyze logs, alerts, and artifacts for incident investigations.
• Strong written and verbal communication skills for documenting findings and briefing stakeholders.

Details

• Work is full time.