Senior Incident Responder

1 мес. назад

USASeniorRemote

incident responsecybersecuritythreat detectionautomationai

Senior Incident Responder role focused on cybersecurity and incident response at an AI-native Managed Detection and Response provider.

Обязанности

is changing how MDR is delivered, and incident response is where that shows up most. As a Senior Incident Responder, you’ll be at the sharp end of our service — leading investigations, containing active threats, and guiding customers through their hardest security moments. You’ll own escalations end to end, shape how we respond as we grow, and build the track record to step into IR leadership as the team scales.

Требования

5+ years in incident response with at least 2 years as a tier 3 analyst,
At least 2 years experience working actual incidents end-to-end,
Deep knowledge of attacker techniques, forensics, and modern detection tooling (SIEM/SOAR, EDR).
Cloud incident response experience across AWS, GCP, or Azure.
Ability to communicate clearly with both technical teams and customers.

Будет плюсом

Experience in an MDR/MSSP environment.
Threat-hunting or detection-engineering background.
Experience presenting findings to executive or client stakeholders.

Условия

Opportunity to lead high-stakes investigations at an MDR company changing the industry, with a clear path to grow into incident response leadership.
Collaborate with a talented and innovative team focused on continuously improving security operations.
Competitive salary and benefits package.
A culture of growth and development, with opportunities to expand your knowledge in AI, cybersecurity, and emerging technologies.

Другое

is an AI-native, automation-first, built-for-scale Managed Detection and Response (MDR) provider. We are a force multiplier for defenders, helping organizations enhance their cybersecurity posture through advanced threat detection, rapid response, and continuous protection. Our team is composed of industry experts with deep experience in cybersecurity, automation and AI-driven solutions. Backed by leading investors, we are rapidly growing and seeking top talent to join our mission of revolutionizing the AI-Native MDR landscape.
We’re a fast growing startup backed by industry experts and top tier investors led by Crosspoint Capital Partners and also backed by Shield Capital, DTCP (formerly Deutsche Telekom Capital Partners), Deepwork Capital, and the Florida Opportunity Fund. Seed round led by Andreessen Horowitz (a16z). As an early employee, you’ll play a meaningful role in defining and building our culture. Get in on the ground floor. We’re a small but well-funded team that just raised a substantial round – joining now comes with limited risk and unlimited upside.
Culture is one of the most important things at .AI —explore our culture deck at culture..ai to witness how we embody it, prioritizing the irreplaceable collaboration and community of in-person work.
Lead incident investigations. Own complex investigations from detection through containment, eradication, and recovery.
Drive customer response. Act as a strategic advisor to clients through active incidents as a calm, credible technical lead.
Improve response playbooks. Turn lessons from real incidents into better detections and repeatable response procedures.
Design and build data collection and preservation toolkit . Work with engineering to automate key processes in the platform, ensuring reliability and non-repudiation.
Build and deliver the custom incident response readiness assessment program , ensuring clients are prepared for an incident by strategically closing existing gaps.
Partner across business units. Work with Detection Engineering, Forward Deployment, and Software Engineering to close gaps and drive product improvements.
Mentor the analyst team. Provide coaching to SOC analysts to raise the bar on investigation quality.
Bachelor’s degree in Computer Science, Cybersecurity, or Information Technology, or a related field (or equivalent experience).
Relevant certifications such as GCIH, GCFA, GCIA, or CISSP are a plus.