Senior Cybersecurity Incident Responder

U.S. Bank

. Lead hands-on investigation of escalated cybersecurity events and incidents .

Posted 11/4/2026full-timeUnited StatesSenior💰 $119,765 - $140,900 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in Cybersecurity Incident Response and Digital Forensics, with a strong ability to analyze security logs and telemetry to identify and investigate incidents. Proficient in using SIEM and EDR technologies, with a solid understanding of network security concepts and the ability to manage complex investigations independently.

Highest-signal resume keywords

Cybersecurity Incident ResponseDigital ForensicsSecurity Information and Event Management (SIEM)Endpoint Detection and Response (EDR)Security Log Analysis

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity Incident HandlingDigital Forensics AnalysisSecurity Telemetry InvestigationNetwork Forensic AnalysisMalware AnalysisThreat HuntingIncident InvestigationLog File AnalysisNetwork Activity AnalysisTechnical Evidence Analysis

Soft Skills

CommunicationCollaborationIndependent Management

Tools & Technologies

Microsoft SentinelMicrosoft DefenderAkamai Security TechnologiesSIEM PlatformsEDR Technologies

Industry Keywords

Indicators of Compromise (IOCs)Security Operations Center (SOC)Red TeamBlue TeamPurple Team

Tech Stack

Tools & technologies

CloudCyber SecurityFirewalls

About the role

Key responsibilities & impact

Lead hands-on investigation of escalated cybersecurity events and incidents
Determine whether suspicious activity represents a confirmed cybersecurity incident
Analyze security logs, alerts, events, and telemetry to identify malicious or anomalous activity
Reconstruct incident timelines and determine attack vectors, scope, impact, and root cause
Perform digital forensics and technical analysis in support of cybersecurity investigations
Use SIEM and EDR platforms during active investigations
Investigate suspicious activity involving endpoints, networks, web applications, firewalls, and other security technologies
Identify indicators of compromise (IOCs) and other evidence associated with malicious activity
Document investigation findings and communicate technically supported conclusions
Collaborate with SOC analysts and other cybersecurity teams during complex or significant incidents
Support containment, remediation, and recovery activities as appropriate during cybersecurity incidents
Participate in an on-call rotation approximately every 4–6 weeks and provide after-hours support for significant cybersecurity incidents

Requirements

What you’ll need

4+ years of relevant hands-on cybersecurity Incident Response, Incident Handling, or Digital Forensics and Incident Response (DFIR) experience
Demonstrated experience personally investigating cybersecurity incidents from escalation through conclusion
Strong security log analysis and security telemetry investigation skills
Hands-on experience using Security Information and Event Management (SIEM) platforms
Hands-on experience using Endpoint Detection and Response (EDR) technologies
Experience with digital forensics, cyber investigations, or forensic analysis
Knowledge of network security concepts, protocols, and network activity analysis
Experience investigating security activity across endpoints, networks, web applications, firewalls, and related security controls
Ability to analyze multiple sources of technical evidence and reconstruct cybersecurity incidents
Ability to independently manage complex incident investigations and reach technically supported conclusions
Ability to participate in an on-call rotation and respond to significant incidents outside normal business hours
Experience with Microsoft Sentinel
Experience with Microsoft Defender
Experience with Akamai security technologies
Advanced Security Operations Center (SOC) experience involving complex incident investigation
Threat hunting experience
Malware analysis or endpoint forensic investigation experience
Network forensic analysis experience
Red Team, penetration testing, or other offensive security experience combined with defensive incident response experience
Typically a Bachelor's degree, or equivalent work experience
Typically five or more years of relevant experience
Skill set in security incident and event management, log file analysis, network packet analysis, incident handling in both traditional network environments as well as cloud environments
Proficient in threat intelligence platforms, security orchestration and automation, red/blue/purple team activities
This position is not eligible for visa sponsorship
Applicants must be able to comply with U.S. Bank policies and procedures including the Code of Ethics and Business Conduct and related workplace conduct and safety policies

Benefits

Comp & perks

Healthcare (medical, dental, vision)
Basic term and optional term life insurance
Short-term and long-term disability
Pregnancy disability and parental leave
401(k) and employer-funded retirement plan
Paid vacation (from two to five weeks depending on salary grade and tenure)
Up to 11 paid holiday opportunities
Adoption assistance
Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law
Incentive and recognition programs
Equity stock purchase
401(k) contribution and pension