Pay Growth
?
out of 5
Not enough data
Not enough info to score pay or growth
Find Jobs
Find Jobs Near You – Available Work in Your Location
Find & Apply For Cyber / Information Security Engineer / Analyst Jobs in Cambridge, Massachusetts
Browse jobs from a variety of sources below, sorted with the most recently published, nearest to the top. Click the title to view more information and apply online.
Skip to job details
Now viewing: Incident Response Engineer
BT
Boston Technology Corporation
Incident Response Engineer
Review key factors to help you decide if the role fits your goals.
Job Security
?
out of 5
Not enough data
Calculating job security score...
Total Score
84
out of 100
Average of individual scores
Job Description
Incident Response Engineer Hybrid in Cambridge, MA, US
• Posted 1 day ago
• Updated 1 day ago Full Time No Travel Required Remote Depends on Experience Fitment Dice Job Match Score™ 🔢 Crunching numbers... Job Details Skills
IR DFIR SOC
Threat detection Incident responder CrowdStrike
SIEM IR DFIR SOC
Threat detection Incident responder CrowdStrike SIEM Summary Responders with 3 to 5 years of experience to handle triage Triage and investigate security alerts and suspected incidents across endpoint, identity, email, network, and cloud environments. Scope incidents, assess severity and business impact, identify affected assets and accounts, and coordinate appropriate containment and remediation actions. Collaborate with ReliaQuest GreyMatter and the managed detection and response function to investigate escalations, validate findings, and coordinate response activities. Investigate phishing, malicious email, and related threats using Proofpoint and available email-security telemetry
Responsibilites:
Triage and investigate security alerts and suspected incidents across endpoint, identity, email, network, and cloud environments. Collaborate with ReliaQuest GreyMatter and the managed detection and response function to investigate escalations, validate findings, and coordinate response activities. Investigate phishing, malicious email, and related threats using Proofpoint and available email-security telemetry Must-haves Hands-on IR, DFIR, SOC, or threat detection experience. Experience with an enterprise EDR (CrowdStrike Falcon is preferred, but any is acceptable). Experience with a SIEM (Splunk preferred, but comparable tools count). Triage, scoping, containment, and remediation experience, plus solid technical writing. Strong analytical and communication skills, and the ability to work independently while collaborating with internal teams and external providers. Nice-to-haves CrowdStrike and Splunk specifically. MDR experience (ReliaQuest GreyMatter is their provider). Proofpoint or similar email security. Experience with identity compromise, phishing, endpoint compromise, network intrusion, or cloud incidents. ThreatLocker, NDR tools like Vectra, and identity security tools. Employers have access to artificial intelligence language tools ("AI") that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
Dice Id:
10114868
Position Id:
232406 Posted 1 day ago