Senior Incident Response Analyst
About The Position
Hogan Lovells Cadwalader is looking for an experienced cybersecurity professional to join our Security Operations team and play a key role in protecting the firm's global technology environment. This position is responsible for leading security investigations, coordinating incident response activities, advancing detection capabilities, and helping strengthen the processes, technologies, and automation that support a mature and evolving security program. The successful candidate will combine strong technical expertise with sound judgment, partnering across security, technology, legal, privacy, risk, and business teams to identify, contain, and mitigate threats while continuously improving the firm's defensive capabilities.
Requirements
- Six (6)+ years of experience in incident response, digital forensics, security operations, or a related cybersecurity discipline.
- Experience investigating threats across enterprise endpoint, cloud, identity, network, email, and SaaS environments.
- Strong expertise in SIEM technologies, log analysis, event correlation, threat hunting, and incident investigation.
- Experience with EDR/XDR platforms and host-based investigation techniques across enterprise environments.
- Demonstrated ability to improve detections, streamline response processes, and drive operational improvements.
- Strong communication, analytical, and problem-solving skills, with the ability to perform effectively during complex investigations and active incidents.
- Bachelor’s degree in information technology, computer science, cybersecurity, or equivalent experience.
Nice To Haves
- Experience with security automation, SOAR platforms, PowerShell, Python, KQL, or similar scripting and query languages is preferred.
- Industry certifications such as GCIH, GCIA, GCFA, GCFE, GNFA, or CISSP preferred.
Responsibilities
- Lead incident response activities through triage, investigation, containment, remediation, recovery, and post-incident analysis.
- Investigate security events across endpoint, identity, network, cloud, email, and SaaS environments.
- Conduct threat hunting and forensic investigations to identify malicious, suspicious, or unauthorized activity.
- Develop and enhance detection logic, alerting, playbooks, workflows, and automation to improve operational effectiveness and response capabilities.
- Serve as a senior escalation point for complex and high-priority security incidents.
- Assess emerging threats, including risks associated with AI-enabled technologies, and support the continuous evolution of security operations.
- Prepare clear and actionable investigation reports and communicate findings to both technical and non-technical stakeholders.
- Mentor team members and contribute to the ongoing growth and maturity of the incident response and security operations program.
Benefits
- medical, dental, and vision insurance
- a 401(k) retirement plan
- paid time off
- annual discretionary bonuses
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
