Search Jobs | Dice.com

Job Details

Skills

Staff Cyber Security Incident and Threat Engineer
Expert Cyber Security Incident and Threat Engineer

Summary

***We are unable to sponsor for this permanent full-time role***

***Position is bonus eligible***

Prestigious Enterprise Company is currently seeking a Staff Cyber Security Incident and Threat Engineer. Candidate will be responsible for handling complex security incidents as an Incident Commander, building detections and detection frameworks, collaborating with cross functional peers, and helping to drive our overall security strategy.

Responsibilities:

Incident Command and Response – Tier 3 Escalation

Act as the Incident Commander for critical security events as part of our on-call rotation.
Foster a culture of learning through blameless post-mortems to drive measurable improvements in both processes and tooling.
Analyze security alerts and data from various sources (SIEM, EDR, IDS/IPS, logs) to identify and investigate sophisticated threats.
Lead tabletop exercises and IR simulations to a variety of audiences in order to test and refine incident response plans, identify weaknesses, and enhance communication and collaboration.

Threat Hunting and Intelligence

Proactively identify potential threats and weaknesses across systems and networks through hypothesis driven threat hunting.
Identify gaps in detection coverage and proactively develop new telemetry, detections, and analytic approaches to address emerging threats across endpoint, identity, cloud, and network domains.
Fuse internal telemetry with open source, commercial, and internal intelligence sources to prioritize risks and improve detection strategies.
Track adversary TTPs and feed findings back into our hunting and detection pipelines.

Strategic Leadership

Leverage automation, enrichment, and playbook-driven workflows to reduce manual triage, improve signal quality, and scale detection and response capabilities.
Work closely with engineering, IT, and risk/compliance teams to improve detection coverage and incident preparedness.
Lead exploration and responsible adoption of AI to improve detection, response, and analyst workflows, while deeply analyzing how adversarial use of AI evolves tradecraft, reshapes attack surfaces, and impacts enterprise risk.
Translate technical findings into clear, actionable insights for stakeholders, contributing to executive-facing metrics and narratives around detection efficacy and risk reduction.
Anticipate and prepare for evolving threats and technology shifts by proactively adapting tooling and detection strategies.

Qualifications:

7+ years of relevant professional experience with a Bachelor’s degree in Computer Science, Information Security or a related field; an equivalent combination of education and experience will also be considered.
7+ years of combined hands-on IT and security architecture development and implementation work experience with a broad exposure to infrastructure/network and multi-platform environments.
Deep understanding of operating systems (Windows, Linux, macOS), network protocols, cloud environments (AWS, Google Cloud Platform, Azure), and common attack techniques (MITRE ATT&CK).
Proficiency with investigation and forensic tools such as EDR platforms (CrowdStrike, SentinelOne), log aggregators (Splunk, ELK), and packet capture tools (Wireshark, Zeek).
Demonstrated ability to lead high-pressure incident response scenarios across technical and non-technical teams.
Scripting skills in Python, PowerShell, or Bash for automation and analysis or experience with SOAR platforms is highly preferred.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: napil006
Position Id: CJ-CySecIR
Posted 30+ days ago

Fitment

Dice Job Match Score™

👤 Reviewing your profile...

Contact the job poster

Craig Johnson

Recruiter @ Request Technology, LLC

View Profile

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Expert Cybersecurity Engineer

Remote

•

Yesterday

We are unable to sponsor as this is a permanent full-time role REMOTE except for no Alaska, North Dakota, Nebraska, Hawaii, Oklahoma, Vermont, Maine, West Virginia, Wyoming, New Hampshire, Puerto Rico A prestigious company is looking for an Expert Cyber Risk Management Engineer. This engineer will lead incident response handling, purple teaming, SIEM, SOAR, tabletop exercises, etc. Responsibilities Act as the Incident Commander for critical security events as part of our on-call rotation.Analyz

Easy Apply

Full-time

$200,000 - $230,000

Cybersecurity Incident Response Engineer, Mid

Remote

•

Today

Position Overview The Cybersecurity Incident Response Engineer, Mid supports the detection, containment, and recovery of cybersecurity incidents across enterprise networks and mission-critical systems in a highly regulated government environment. This role contributes to developing and executing response strategies, including automation, scripting, and playbooks, to enhance the speed and consistency of security operations. The engineer performs detailed technical analysis, coordinates with cros

Full-time

DFIR Specialist, Cyber Security Risk Management (Remote)

Remote or Franklin, Tennessee

•

Today

Job Description Job Summary As an Incident Response Specialist, you will leverage your extensive expertise in digital forensics, incident handling, and crisis management to lead the containment, mitigation, and resolution of advanced security incidents across the organization's enterprise environment. This role is responsible for the end-to-end lifecycle of security incidents, including coordinating cross-functional response efforts, performing deep-dive forensic analysis, and engineering stra

Full-time

Expert Detection and Response Engineer (Remote)

Remote or Irvine, California

•

Today

Job Title: Expert Detection and Response Engineer (Remote) Requisition ID: R027801 Job Description: Role Overview Activision is seeking an Expert Detection and Response Engineer to help protect our players, studios, platforms, and enterprise environments from advanced cyber threats. As part of our Global Security Operations organization, this role is responsible for actively identifying, investigating, and responding to security threats. This role is highly hands-on and focuses on real-world

Full-time

USD 124,000.00 - 229,400.00 per year

Filter Results

Job post features

Posted date

Work settings

Employment type

Distance

Employer type

Work authorization

Expert Cyber Security Incident and Threat Engineer

Skills

Summary

Dice Job Match Score™

Craig Johnson

Similar Jobs

Expert Cyber Security Incident and Threat Engineer

Job Details

Skills

Summary

Dice Job Match Score™

Craig Johnson

Similar Jobs