Security Engineer; Incident Response- Major Entertainment - NO H1B OR C2C

We are seeking an experienced Security Engineer – Incident Response to join a Global Information Security team and help investigate, analyze, and respond to cybersecurity incidents impacting third-party vendors, suppliers, and business partners.

This role is ideal for a security professional with hands-on experience in Incident Response, SOC operations, Digital Forensics, Threat Hunting, or Security Operations who is comfortable investigating complex security events and communicating risk to both technical and non-technical stakeholders.

• Investigate and respond to third-party cybersecurity incidents
• Perform incident triage, containment, eradication, remediation, and root cause analysis
• Conduct in-depth technical investigations, including log analysis and digital forensic analysis
• Evaluate the potential business and security impact of incidents
• Determine residual risk and appropriate remediation steps
• Document and track incident response activities
• Prepare incident reports, briefings, and presentations for leadership and security partners
• Work closely with Incident Response, Information Security, engineering, technology, and business teams
• Follow established Incident Response processes and procedures

• 5+ years of overall technology experience
• 3+ years of information security experience
• Hands-on experience within Incident Response, SOC, Digital Forensics, Threat Hunting, or Detection
• Strong understanding of information security principles, practices, and procedures
• Understanding of:
• Web application security
• Infrastructure and Internet security
• Operating systems
• Networking protocols
• Databases
• Ability to quickly assess security incidents and identify, isolate, and communicate risks
• Strong technical writing and documentation skills
• Excellent written and verbal communication skills
• Ability to manage multiple incidents and priorities in a fast-paced environment

• Experience with EDR tools such as Crowd Strike, Sentinel One, Cortex XDR, or Tanium
• Experience with SIEM and/or SOAR platforms
• Experience responding to incidents within AWS, Azure, or GCP
• Python or other scripting experience
• CISSP certification
• SANS/GIAC certifications such as GCIH, GCFA, GCIA, GCED, or GSEC

#Cyber Security #Incident Response #Security Engineer #SOC #Digital Forensics #Threat Hunting #Information Security #Cloud Security #SIEM #Cyber Security Jobs