Senior Incident Response Engineer

Sinch•Chicago, IL

3d•$123,200 - $175,000•Remote

About The Position

The Senior Incident Response Engineer is a senior technical expert responsible for leading and executing the most complex and high-impact incident response activities within the organization. This role involves coordinating large-scale incident response efforts, performing advanced threat hunting, and providing expert guidance on incident containment, eradication, and recovery. You will collaborate with internal and external stakeholders to enhance the organization’s incident response capabilities and overall security posture.

Requirements

7+ years of cybersecurity experience, with a strong focus on incident response, threat hunting, and forensic analysis.
Proven experience leading the response to large-scale or complex security incidents.
Deep knowledge of cybersecurity principles, threat landscapes, and security technologies, including SIEM, EDR, IDS/IPS, and forensic tools.
Hands-on experience with advanced forensic analysis, malware reverse engineering, and threat hunting.
Proficiency with scripting and automation tools, such as Python or PowerShell, to improve and streamline incident response processes.
Strong analytical and problem-solving skills, with the ability to assess complex situations, synthesize information from multiple sources, and make sound decisions under pressure.
Excellent communication skills and the ability to translate complex technical findings for both technical and non-technical audiences.
Experience providing technical leadership, coordinating cross-functional teams, and guiding others through high-pressure security incidents.
A bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent relevant professional experience.
An advanced security certification such as CISSP, GCIH, GREM, or a comparable certification.

Nice To Haves

A master’s degree in Computer Science, Information Security, or a related field.
Additional certifications in digital forensics, such as EnCE or GCFA, or other specialized security domains.

Responsibilities

Lead the response to critical and high-severity security incidents, coordinating efforts across multiple teams and external partners as needed.
Perform advanced forensic analysis, reverse engineering of malware, and deep-dive investigations to identify the root cause of incidents.
Develop and implement containment, eradication, and recovery strategies to minimize the impact of security incidents.
Conduct proactive threat hunting to identify and mitigate potential security threats before they can cause harm to the organization.
Analyze threat intelligence from various sources to inform incident response efforts and improve detection capabilities.
Develop and refine threat-hunting techniques, tools, and methodologies to stay ahead of emerging threats.
Provide expert guidance and mentorship to junior incident response engineers, helping to develop their technical skills and knowledge.
Lead incident response exercises and simulations to prepare the team for real-world scenarios.
Serve as a technical advisor to management and other departments on matters related to incident response and threat management.
Contribute to the development and refinement of incident response playbooks, processes, and procedures to improve efficiency and effectiveness.
Identify and implement process improvements and automation opportunities within the incident response workflow.
Collaborate with the SOC and other security teams to integrate incident response strategies into broader security operations.
Work closely with IT, Legal, Compliance, and other departments to ensure a coordinated and comprehensive approach to incident management.
Communicate effectively with senior management and stakeholders regarding the status, impact, and resolution of security incidents.
Engage with external partners, such as law enforcement and industry groups, during significant security events.
Maintain detailed documentation of incident response activities, including forensic analysis, evidence collection, and lessons learned.
Prepare comprehensive reports on security incidents, including root cause analysis, impact assessment, and recommendations for improvement.
Present findings to executive leadership and other stakeholders, providing clear and actionable insights.
Stay current with the latest cybersecurity threats, trends, tools, and best practices to continuously enhance incident response capabilities.
Experiment with and adopt new technologies and techniques to improve the organization’s ability to detect and respond to security incidents.
Participate in industry conferences, training, and certifications to maintain expertise in incident response and related fields.

Benefits

Comprehensive market competitive medical, dental, and vision plans.
Variety of supplemental plans to meet individual needs.
Access to telehealth for all participants.
Free virtual counselling resources through our global Employee Assistance Program.
Roth and Pre-tax 401(k) options including an employer match.
Generous paid time off program.
Paid parental leave and family planning support.
Flexible remote work offerings.
Paid time off to support a volunteer program of choice.
Discounts on retail, entertainment and more through our Reward+ program.