Senior Cyber Incident Responder

We are seeking an experiencedSenior Cyber Incident Responder to investigate and respond to complex cybersecurity incidents across our organization.

In this role, you will conduct advanced investigations, perform root cause analysis, and contribute to the continuous improvement of our detection and response capabilities. You will also collaborate closely with cross-functional teams, support threat hunting activities, and help strengthen organizational readiness through knowledge-sharing and incident simulations.

Responsibilities

• Respond to complex cybersecurity incidents, ensuring timely investigation, containment, eradication, and recovery
• Serve as a senior technical responder during major security incidents, working alongside the Incident Response Manager and key stakeholders throughout the incident lifecycle
• Conduct advanced investigations involving endpoint, network, identity, cloud, and application-based threats
• Perform root cause analysis and develop actionable recommendations to prevent recurrence
• Support digital forensics and evidence collection activities when required
• Analyze attacker tactics, techniques, and procedures (TTPs) to understand threat actor activity and improve detection and response capabilities
• Collaborate with Cyber Defense, Infrastructure, Cloud, Application, Risk, Legal, Privacy and other business teams during incident investigations
• Produce clear and concise incident reports, executive summaries, and post-incident reviews
• Contribute to the development and improvement of incident response procedures, playbooks, and operational documentation
• Support threat hunting activities and the continuous enhancement of detection and response capabilities
• Provide guidance to junior analysts during investigations and participate in knowledge-sharing sessions, workshops, tabletop exercises, and incident simulations
• Support Tier 2 by sharing comprehensive company insights and knowledge to enhance operational efficiency
• Participate in on-call rotation once a month for 12-hour shifts (passive on-call)

Requirements

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field, or equivalent practical experience
• 5+ years of experience in cybersecurity, with significant experience in Incident Response, Digital Forensics, or Security Operations
• Hands-on experience responding to and investigating complex cybersecurity incidents
• Understanding of incident response methodologies, attack lifecycle concepts, and threat actor tactics and techniques
• Background in conducting investigations across endpoint, network, identity, cloud, and enterprise environments
• Expertise in performing root cause analysis and developing remediation recommendations
• Strong analytical, investigative, and problem-solving skills
• Capability to communicate effectively with both technical and non-technical stakeholders
• Proficiency in creating operational documentation, reports, and technical procedures
• Excellent written and verbal communication skills in English (B2+ level)