Senior Cyber Incident Responder

Labcorp

. Serve as the lead responder for validated cyber incidents affecting clinical operations, EHRs, connected medical devices, or PHI .

Posted 9/29/2026full-timeDurham • North Carolina • United StatesSenior💰 $100,000 - $150,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in incident response and cybersecurity within healthcare environments, with a strong focus on EHRs, medical devices, and compliance with HIPAA and HITECH regulations. Proficient in utilizing SIEM and EDR tools for threat detection and response, while effectively collaborating with clinical and IT stakeholders.

Highest-signal resume keywords

Incident Response FrameworksSIEM Tools (Splunk, Anvilogic)EDR Platforms (CrowdStrike, SentinelOne)Windows and Linux OS InvestigationsCybersecurity Experience in Healthcare

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ResponseNetwork Protocol AnalysisEDR TelemetryDetection Rule WritingPowerShell ScriptingPython ScriptingBash ScriptingLog AnalysisRoot Cause AnalysisThreat Intelligence Analysis

Soft Skills

LeadershipCollaborationCommunicationProblem-SolvingStakeholder Engagement

Tools & Technologies

SIEMEDRCloud ApplicationsWindowsLinuxIOSEpicCernerHL7/FHIRIoMT Devices

Industry Keywords

HIPAAHITECHCyber Kill ChainMITRE ATT&CKHealthcare ITClinical OperationsRegulated EnvironmentsCybersecurityIncident Response PlanData Exchange Platforms

Tech Stack

Tools & technologies

CloudCyber SecurityiOSLinuxPythonSplunk

About the role

Key responsibilities & impact

Serve as the lead responder for validated cyber incidents affecting clinical operations, EHRs, connected medical devices, or PHI
Coordinate with technical and clinical stakeholders to contain and remediate threats across hospitals, clinics, and remote care environments
Improve the Incident Response Plan and maintain readiness for ransomware, business email compromise, and other threats
Lead triage, containment, and root cause analysis for events affecting clinical applications, patient portals, imaging systems, and backend infrastructure
Analyze logs and EDR telemetry from medical devices, cloud applications, employee workstations, and data exchange platforms
Perform investigations across Windows, Linux, iOS, and cloud platforms using SIEM and manual log analysis
Lead stakeholder briefings during high-severity incidents
Enrich investigations using internal threat intelligence, OSINT, H-ISAC, and HC3 sources
Contribute to detection engineering and playbook development for healthcare-specific threat vectors
Write post-incident reports for operational, risk, and compliance teams
Lead investigation, containment, resolution, and recovery of enterprise cybersecurity incidents
Collaborate across clinical, IT, and compliance teams and handle escalated SOC events

Requirements

What you’ll need

Bachelor's Degree
3 or more years of experience in cybersecurity
5 or more years of experience in Windows and Linux OS investigations, network protocol analysis, and EDR telemetry
2 or more years of experience with incident response frameworks (NIST 800-61, HITRUST IRM, etc.) and adversary models (MITRE ATT&CK, Cyber Kill Chain)
2 or more years of experience in SIEM (e.g., Splunk, Anvilogic), EDR platforms (e.g., CrowdStrike, SentinelOne), and forensic tools
Hands-on incident response experience in large enterprise environments (30K+ users, multiple business units or hospitals)
Strong understanding of HIPAA security rule and HITECH
Familiarity with Epic, Cerner, HL7/FHIR interfaces, or IoMT devices
Proficiency in writing detection rules and custom signatures
PowerShell, Python, or Bash scripting skills
Experience handling sensitive incidents in regulated industries
Ability to lead investigations involving patient data and coordinate with privacy and compliance officers
Exposure to healthcare IT, hospital systems, or regulated environments
Permanent authorization to work in the United States without employer sponsorship now or in the future

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
Life insurance
Short-term disability (STD)
Long-term disability (LTD)
401(k)
Paid Time Off (PTO) or Flexible Time Off (FTO)
Tuition Reimbursement
Employee Stock Purchase Plan