Job Description

Salary: $120,000 - 160,000 per year Requirements:

• We require a security certification.
• We prefer Security+, CEH, OSCP/OSCE, CISSP, CISA, or GIAC credentials.
• We need at least 7 years of experience in IT and 5 years in incident response.
• We prefer 10 years in IT and a minimum of 7 years in incident response.
• We are looking for candidates with 5+ years of cybersecurity incident response experience and a strong foundation in networking and security, including intrusion detection and prevention.
• We expect solid knowledge of security platforms such as IDS, IPS, EDR, SIEM, next-generation antivirus, and anomaly detection solutions.
• We value understanding of cyber attack stages, including reconnaissance, scanning, enumeration, access, privilege escalation, persistence, exploitation, and concealment.
• We need familiarity with the six phases of a cyber incident response plan.
• We seek broad awareness of application and IT product diversity, interoperability, and overall information security.
• We prefer experience configuring and running vulnerability scans with tools such as Tenable.io and Tanium.

• We receive, assess, and investigate endpoint and network alerts from multiple enterprise sources to determine root causes and identify unusual activity or potential threats.
• We detect, confirm, and report possible attacks, intrusions, anomalous behavior, and misuse while separating true incidents from routine activity.
• We correlate events using information from across the enterprise to improve situational awareness and evaluate how effective an observed attack may be.
• We act as an escalation point for SOC Analysts, providing guidance and support while tracking incidents through to full resolution.
• We create, maintain, and improve incident response processes, procedures, and blueprints, while documenting and updating our knowledge base of methodologies and response plans.

• Support
• Network
• Security

More:

We are part of Syscos Vulnerability and Threat Management program, focused on using defensive controls and intelligence from a range of sources to identify, analyze, and report cybersecurity events that occur or could occur within our network. Our work helps protect our information, resources, and networks from threats. We offer a hybrid work arrangement with 3 to 4 days in the office. Reasonable accommodations are available to support individuals with disabilities in performing the essential functions of the role.

last updated 28 week of 2026

Job Tags

Similar Jobs