Cybersecurity Engineer - Incident Response

As a Cybersecurity Engineer specializing in Incident Response, you will be at the forefront of defending our organization against cyber threats. This role involves hands-on investigation of security incidents across various platforms, while also engineering enhancements to our incident response capabilities. You will leverage Microsoft security technologies to detect, contain, and recover from threats, and translate lessons learned into measurable improvements in our security posture.

• Investigate and respond to cybersecurity incidents
• Engineer improvements to incident response capabilities
• Utilize Microsoft Sentinel, Defender XDR, and Entra ID
• Develop KQL queries for threat detection and hunting
• Improve security logging and platform integrations
• Develop and maintain incident response plans and playbooks

• Must be a U.S. citizen or permanent resident.

• Requires a Secret security clearance.