Cyber Incident Response Lead (Remote)

The Cyber Incident Response Lead will respond to, contain, escalate, investigate, and coordinate mitigation of security events and anomalies detected by the Cyber Fusion Center. This role involves conducting advanced incident response activities for complex cybersecurity matters, orchestrating workstreams across teams like Forensics and Cyber Threat Hunting, and responding to cybersecurity events and alerts according to applicable SLOs. The Lead will manage multiple security incident cases throughout the entire incident response lifecycle, including analysis, containment, eradication, recovery, and lessons learned. They will also coordinate the conclusion of security incidents, escalate severe incidents, maintain detailed case documentation, and mentor junior analysts. Additionally, the role supports the overall direction of the Cyber Fusion Center and contributes to security strategy.