Senior Cybersecurity Incident Responder
About The Position
U.S. Bank is seeking a Senior Cybersecurity Incident Responder to join its Cybersecurity Incident Response team. The role investigates escalated cybersecurity events, performs hands-on technical analysis, and determines incident scope, impact, and root cause. The responder takes cases beyond initial SOC triage and independently investigates them through resolution, analyzing logs and security telemetry, conducting digital forensic analysis, and using SIEM and EDR technologies to investigate suspicious activity across endpoints, networks, web applications, firewalls, and other security controls. The position requires working from a U.S. Bank location three or more days per week. It includes participation in an on-call rotation approximately every four to six weeks and after-hours support for significant cybersecurity incidents. The position is not eligible for visa sponsorship.
Requirements
- At least four years of relevant hands-on cybersecurity incident response, incident handling, or DFIR experience.
- Demonstrated experience personally investigating cybersecurity incidents from escalation through conclusion.
- Strong security log analysis and security telemetry investigation skills.
- Hands-on experience using SIEM platforms and EDR technologies.
- Experience with digital forensics, cyber investigations, or forensic analysis.
- Knowledge of network security concepts, protocols, and network activity analysis.
- Experience investigating security activity across endpoints, networks, web applications, firewalls, and related security controls.
- Ability to analyze multiple sources of technical evidence and reconstruct cybersecurity incidents.
- Ability to independently manage complex incident investigations and reach technically supported conclusions.
- Ability to participate in an on-call rotation and respond to significant incidents outside normal business hours.
- Typically a bachelor's degree or equivalent work experience.
- Typically five or more years of relevant experience.
- Skill in security incident and event management, log file analysis, network packet analysis, and incident handling in traditional network and cloud environments.
- Proficiency in threat intelligence platforms, security orchestration and automation, and red/blue/purple team activities.
Nice To Haves
- Experience with Microsoft Sentinel.
- Experience with Microsoft Defender.
- Experience with Akamai security technologies.
- Advanced SOC experience involving complex incident investigation.
- DFIR experience.
- Threat hunting experience.
- Malware analysis or endpoint forensic investigation experience.
- Network forensic analysis experience.
- Red team, penetration testing, or other offensive security experience combined with defensive incident response experience.
Responsibilities
- Lead hands-on investigations of escalated cybersecurity events and incidents.
- Determine whether suspicious activity represents a confirmed cybersecurity incident.
- Analyze security logs, alerts, events, and telemetry to identify malicious or anomalous activity.
- Reconstruct incident timelines and determine attack vectors, scope, impact, and root cause.
- Perform digital forensics and technical analysis in support of cybersecurity investigations.
- Use SIEM and EDR platforms during active investigations.
- Investigate suspicious activity involving endpoints, networks, web applications, firewalls, and other security technologies.
- Identify indicators of compromise and other evidence associated with malicious activity.
- Document investigation findings and communicate technically supported conclusions.
- Collaborate with SOC analysts and other cybersecurity teams during complex or significant incidents.
- Support containment, remediation, and recovery activities as appropriate during cybersecurity incidents.
- Participate in an on-call rotation approximately every four to six weeks and provide after-hours support for significant cybersecurity incidents.
Benefits
- Healthcare, including medical, dental, and vision coverage.
- Basic term and optional term life insurance.
- Short-term and long-term disability coverage.
- Pregnancy disability and parental leave.
- 401(k) and employer-funded retirement plan.
- Paid vacation of two to five weeks depending on salary grade and tenure.
- Up to 11 paid holiday opportunities.
- Adoption assistance.
- Sick and Safe Leave accruals of one hour for every 30 hours worked, up to 80 hours per calendar year unless otherwise provided by law.
- Incentive and recognition programs.
- Equity stock purchase, 401(k) contribution, and pension, subject to eligibility requirements.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
