Senior Cyber Resiliency Engineer
Remote/ Fulltime role
Overview
The Senior Cyber Resiliency Engineer develops and supports technical capabilities that strengthen incident response and cyber resiliency across the enterprise. Areas of concentration include alert triage, technical analysis, incident investigation, threat identification, containment, SIEM and EDR platforms, security monitoring, and exposure management. Assist in the development and implementation of cybersecurity procedures, playbooks and standards. Identify inadequacies and propose solutions to improve the organization's ability to detect, analyze, contain and recover from cybersecurity incidents. The Senior Cyber Resiliency Engineer will also mentor team members, assist with projects, and maintain technical documentation.
Responsibilities
Serves as a senior technical escalation resource in coordination with the SOC, leading and supporting the investigation, scoping, containment, eradication and recovery activities for cybersecurity incidents. Utilizes extensive hands-on cybersecurity experience across security operations, risk and vulnerability management, endpoint, network, identity, cloud and log data to assess current state, determine root cause, evaluate business impact and identify affected systems. Partners with cybersecurity leadership, infrastructure, application, identity, exposure management and other IT teams to assess security gaps, facilitate collaborative solution discussions and drive remediation actions to completion. Develops and maintains incident response procedures, technical playbooks, escalation standards, detection content, response workflows and supporting documentation. Evaluates and advances SIEM, EDR, alerting, automation and other cybersecurity capabilities that strengthen detection, investigation, containment, recovery and resiliency. Leads lessons learned and after-action review activities; documents findings, evidence, improvement opportunities and accountable action items. Participates in tabletop exercises, incident simulations and technical validation activities to improve response readiness. Works closely with legal, compliance, privacy and other departments to support coordinated incident-management activities. Monitors emerging threats, vulnerabilities and threat intelligence, and recommends tactical process improvements and long-term maturity enhancements to detection and response capabilities. Mentors team members on incident response procedures, investigations, security tools, documentation and effective cross-functional coordination.