Cyber Incident Responder

Tektend LLC is seeking an experienced Cyber Incident Responder to join our fast-paced cybersecurity operations team in Chicago, IL on a hybrid basis. In this role, you will serve as a frontline defender detecting, analyzing, and mitigating advanced cyber threats across enterprise and cloud environments, ensuring minimal impact to our critical operations.Key Responsibilities:Lead triage, containment, eradication, and recovery efforts for active security incidents and sophisticated intrusions.Perform in-depth host, memory, and network forensic investigations to determine the root cause, scope, and timeline of compromises.Utilize EDR, SIEM, and network telemetry to conduct proactive threat hunting based on emerging threat actor TTPs aligned with the MITRE ATT&CK framework.Develop and refine automated incident response playbooks, detection rules, and runbooks to streamline operational efficiency.Document detailed post-incident reviews and present actionable technical findings and remediation strategies to technical and executive leadership.Requirements:3+ years of dedicated experience in incident response, digital forensics, or advanced SOC tier operations.Strong technical expertise using enterprise EDR platforms (e.g., CrowdStrike, SentinelOne) and SIEM tools (e.g., Splunk).Proficiency in scripting with Python, PowerShell, or Bash to automate forensic data collection and response actions.Solid understanding of operating system internals (Windows/Linux), enterprise identity systems, and cloud infrastructure security.Relevant security certifications such as GIAC (GCIH, GCFA, GNFA), CISSP, or equivalent are strongly preferred.Ability to work in a hybrid model in the greater Chicago, IL area with occasional on-call rotation duties.