Apply on Employer Site

360CyberX · 3 hours ago

Incident Responder

United States

Full-time

Remote

Mid Level

360CyberX, LLC is a security-focused technology partner dedicated to helping organizations prevent breaches and maintain system availability. The Incident Responder role involves detecting, investigating, and responding to cybersecurity incidents, working closely with various teams to minimize impacts and restore normal operations.

Computer & Network Security

Responsibilities

Detecting, investigating, and responding to cybersecurity incidents across enterprise and client environments

Identifying security breaches, minimizing their impact, and restoring normal operations

Actively investigating alerts and security events from SIEM, EDR/XDR, cloud security, identity, and network security platforms

Analyzing suspicious activity, determining scope and impact, performing root-cause analysis, and executing containment, eradication, and recovery actions

Coordinating incident response activities in alignment with established playbooks

Supporting digital forensics and evidence collection

Documenting incident timelines, findings, and lessons learned

Contributing to post-incident reviews to improve detection, response, and resilience

Collaborating with engineering and security teams to recommend control improvements that reduce the likelihood and impact of future incidents

Qualification

Incident response expertiseThreat huntingSecurity tooling experienceNetwork security conceptsIncident response frameworksAnalytical skillsBachelor’s degreeRelevant certificationsProblem-solving skills

Required

Strong expertise in cybersecurity and incident response, with hands-on experience investigating and responding to security incidents across endpoint, network, cloud, and identity environments

Deep understanding of attacker tactics, techniques, and procedures (TTPs), including malware, phishing, lateral movement, privilege escalation, and data exfiltration

Experience with security tooling such as SIEM, EDR/XDR, cloud security platforms, and log analysis tools to investigate and contain incidents

Solid knowledge of network security concepts, including traffic analysis, firewalls, DNS, proxy logs, and network-based attack detection

Strong analytical and problem-solving skills, with the ability to assess impact, determine root cause, and recommend effective remediation actions under time pressure

Familiarity with incident response frameworks and standards such as NIST, CIS, and ISO, including incident handling, documentation, and post-incident improvement

Bachelor's degree in Cybersecurity, Information Technology, or a related field