Engineer II - Cyber Incident Response

Mid-level cybersecurity engineer within a Security Operations Center responsible for detecting, investigating, and responding to incidents including phishing, malware, and unauthorized access. Role involves threat analysis, incident escalation, and collaboration with global cyber defense teams to contain threats and improve response processes.

Responsibilities

• Investigate and respond to cybersecurity incidents including phishing, malware, ransomware, and unauthorized access
• Perform analysis of logs, alerts, and forensic data to determine incident scope and impact
• Escalate complex or high-severity incidents to senior staff with clear documentation and evidence
• Assist in containment, eradication, and recovery activities during incident response
• Contribute to development and maintenance of SOC playbooks, runbooks, and standard operating procedures

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or equivalent work experience
• 3–5 years progressive cybersecurity experience with minimum 2 years in SOC operations or incident response
• Strong knowledge of cybersecurity fundamentals, incident response methodology, and adversary tactics
• Hands-on experience with SIEM, EDR, and forensic tools such as Splunk, CrowdStrike, or Wireshark
• Familiarity with industry frameworks including NIST, MITRE ATT&CK, and ISO 27035
• Demonstrated ability to analyze logs, alerts, and artifacts for incident investigations
• Strong written and verbal communication skills for documenting findings and briefing stakeholders