Incident Response Engineer 2

Responsibilities

• Perform advanced investigative and forensic analysis across endpoints, network logs, and cloud telemetry
• Execute containment and response actions to neutralize active threats as directed by Incident Advisors or Senior Analysts
• Validate indicators of compromise (IOCs) and correlate alerts, artifacts, and telemetry to determine scope and root cause
• Maintain clear and accurate engagement documentation, including trailheads, timelines, and playbooks
• Provide guidance and mentorship to junior IR and SOC analysts to ensure adherence to CIRT investigative and documentation standards
• Prepare technical findings and summaries for inclusion in customer updates and post-incident reports
• Identify and communicate detection or response gaps observed during investigations
• Participate in shift handovers, debriefs, and post-incident reviews to ensure engagement continuity
• Maintain accurate time and activity tracking to support operational visibility and service improvement

Languages