FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in leading cybersecurity incident response efforts, including advanced analysis of security logs and network traffic, while maintaining compliance with legal and regulatory requirements. Proficient in developing incident response playbooks and utilizing SOAR, SIEM, DLP, and EDR tools to enhance security operations.
Highest-signal resume keywords
Team Leadership ExperienceExpert Proficiency Using SIEMExperience in SOAR, DLP, and EDRKnowledge of Security Incident LifecycleStrong Project Management Skills
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Cyber Threat AnalysisDigital Computer ForensicsIncident ResponseApplication SecurityOperating Systems SecurityCryptographic ControlsNetworkingProgramming LanguagesScriptingSecurity Documentation
Soft Skills
Effective Oral CommunicationAnalytical SkillsJudgment SkillsConsultation SkillsCollaborative Leadership
Tools & Technologies
SIEMSOARDLPEDRDigital Forensic SolutionsSecurity Monitoring ToolsSecurity Orchestration ToolsAI-Driven AutomationSecurity AlertsNetwork Traffic Analysis
Certifications & Qualifications
CISSPGCIAGCIHCHFIGCFACASP+
Industry Keywords
NIST Cyber Security FrameworkCybersecurity TrendsThreat Actor CapabilitiesNetwork Attack MethodologiesCritical Infrastructure
Tech Stack
Tools & technologiesCyber Security
About the role
Key responsibilities & impact- Lead cyber security incident responders through investigation, coordination, review, closure, and reporting
- Provide Tier-2 support for security alerts and validate tuning requests
- Tune and reduce alerts
- Lead automation and AI efforts to optimize security operations
- Maintain accurate security documentation
- Monitor security alerts and events from security tools and technologies
- Perform advanced analysis of security logs, network traffic, and endpoint data
- Deploy and maintain digital forensic solutions
- Lead forensic investigations to determine incident scope, root cause, and impact
- Preserve evidence according to legal and regulatory requirements
- Participate in post-incident reviews and identify improvement opportunities
- Stay current with cybersecurity trends, threats, and technologies
- Lead development and enhancement of SOC processes, procedures, and SOAR/AI-driven automation
Requirements
What you’ll need- Team Leadership experience, taking initiative; providing and following through on solutions across various skillsets
- Proactive, collaborative leadership and ability to work with peers and cross-functional teams
- Experience in SOAR, SIEM, DLP, and EDR
- Ability to create and tune alerts/rules independently
- Knowledge and experience implementing controls based on security regulation, such as the NIST Cyber Security Framework, is a plus
- Effective oral and written communication, analytical, judgment, and consultation skills
- Ability to work independently and strong project management skills
- Ability to communicate in formal and informal review settings with all levels of management
- Expert proficiency using SIEM, SOAR, EDR, and DLP tools
- Knowledge of security incident lifecycle and management
- Experience developing incident response playbooks and managing incident analysis and remediation
- Knowledge of security orchestration and automated response tools and concepts
- Some experience with scripting and development activities using APIs to optimize integrations between security monitoring and analysis devices
- Knowledge of Generative and Prompt A.I.
- Minimum seven years of hands-on security operations experience
- Interdisciplinary experience in four or more areas including Cyber Threat Analysis, Digital Computer Forensics, Incident Response, Application Security, Operating Systems Security, Cryptographic Controls, Networking, Programming languages, and Incident Response
- Comprehensive knowledge of threat actor capabilities, intentions, methodologies, and motives
- Familiarity with computer network exploitation and network attack methodologies
- Understanding of the relationship between cybersecurity activities, the financial services industry, and critical infrastructure
- Knowledge of leading-edge security technologies and methods
- Availability for shift work and 24 x 7 on-call response responsibilities
- Strongly preferred certification: CISSP, GCIA, GCIH, CHFI, GCFA, or CASP+
Benefits
Comp & perks- A hybrid work environment, up to 2 days per week of remote work
- Tuition Reimbursement to support your continued education
- Student Loan Repayment Assistance
- Technology Stipend allowing you to use the device of your choice to connect to our network while working remotely
- Generous PTO and Parental leave
- 401k Employer Match
- Competitive health benefits including medical, dental and vision
- Discretionary bonus eligibility
- Annual discretionary incentive compensation award with a target range of 8% to 15%