remote
IT Incident Response Engineer - Eaton
Software Engineer
Senior Incident Response Engineer responsible for detecting, analyzing, and mitigating advanced cyber threats across on‑prem, hybrid, and multi‑cloud environments, leveraging SIEM, forensics, and cloud security expertise.
About the role
Key Responsibilities
- Lead investigation and containment of security incidents across on‑prem, hybrid, and multi‑cloud infrastructures.
- Analyze threat indicators, develop playbooks, and coordinate response actions with cross‑functional teams.
- Utilize SIEM, EDR, and cloud native security tools to detect, triage, and remediate incidents.
- Conduct post‑incident reviews, root cause analysis, and improve detection capabilities.
- Document findings, produce detailed incident reports, and maintain knowledge base for future reference.
Requirements
- 5+ years of experience in incident response, threat hunting, or cyber security operations.
- Proficiency with SIEM platforms (e.g., Splunk, QRadar) and cloud security services (AWS, Azure).
- Strong knowledge of Linux/Windows forensics, malware analysis, and network protocols.
- Excellent communication skills and ability to work in a fast‑paced, collaborative environment.
- Relevant certifications (e.g., CISSP, GCIH, GCFA) preferred.