Incident Responder

Arctiq•Brentwood, TN

51d•Remote

About The Position

As an Incident Responder within our Manager Security Service teams, you will be a frontline defender for our customers. You will investigate and respond to security incidents across client environments, ensuring timely containment, remediation, and communication. Working closely with our clients and internal security teams, you will proactively detect threats, guide response efforts, and help improve each customer's security posture through expert analysis and recommendations.

Requirements

Bachelor’s degree/Diploma in Computer Science, Cybersecurity, Information Systems, or a related field—or equivalent practical experience.
Solid understanding of Windows and Linux operating systems.
Familiarity with cloud platforms such as AWS, Azure, or Google Cloud.
Strong grasp of security frameworks (MITRE ATT&CK, NIST, etc.).
Proficiency with EDR and SIEM tools (e.g., CrowdStrike, SentinelOne, Splunk, QRadar).
Experience with log analysis, correlation of diverse data sets, and threat behavior analysis.
Knowledge of networking fundamentals (protocols, firewalls, routing, etc.).
Customer-focused mindset with the ability to communicate effectively and confidently with technical and non-technical stakeholders.
Strong analytical, troubleshooting, and problem-solving skills.
High attention to detail, discretion, and integrity in handling sensitive client data.
Ability to manage multiple incidents and prioritize tasks under pressure.
Self-starter with a passion for continuous learning and cybersecurity excellence.
Hands-on incident response or SOC experience in a service provider environment.

Nice To Haves

Relevant certifications such as GCIH, GCFA, GCIA, Security+, CEH, or CISSP.
Familiarity with scripting or programming languages (Python, PowerShell, etc.).
Experience working with MSSP or MDR teams.

Responsibilities

Investigate and triage customer security incidents involving malware, intrusions, unauthorized access, and suspicious behavior.
Deliver clear and actionable incident reports to clients, including root cause analysis and remediation guidance.
Support incident response activities such as containment, eradication, and recovery across diverse customer environments.
Proactively hunt for threats in client networks and endpoints using threat intelligence and behavioral analysis.
Operate and tune customer-deployed security tools, including SIEMs, EDR platforms, and threat intel integrations.
Work closely with customer IT and security teams to provide ongoing support and strategic recommendations.
Participate in after-action reviews with clients to strengthen detection and response capabilities.
Help document, refine, and evolve incident response playbooks and processes based on customer engagements.