Incident Commander (Tier 3)

Responsibilities:

• Advanced Incident Response: Lead Tier 3 investigations into complex cybersecurity incidents, including malware infections, phishing campaigns, ransomware attacks, social engineering, and data exposure.
• Incident Command & Coordination: Serve as the primary operational coordinator during significant security incidents, assigning response actions and coordinating enterprise teams and stakeholders.
• Security Monitoring & Threat Analysis: Review escalated alerts and analyze events using Splunk SIEM, performing advanced triage to distinguish genuine threats from false positives.

Requirements:

• Professional Experience: At least 7 years of relevant experience, or a bachelor's degree with 3+ years; U.S. citizenship required.
• Mandatory Certifications: Active CISSP and GCIH certifications, or equivalent.
• Security Tools & Technologies: Working knowledge of Splunk SIEM, Microsoft Defender EDR, Palo Alto Networks Cortex XSOAR, and digital forensic tools.

Benefits:

• Remote Work: 100% remote working arrangement within the United States.
• Medical Coverage: Choice of medical insurance plans with generous employer contributions.
• Retirement Planning: 401(k) retirement savings plan with employer matching.
• Paid Time Off: Paid leave that increases with years of service, plus paid federal holidays.