Senior Incident Response Engineer

Scope customer security incidents Understand and identify indicators of attack and indicators of compromise Analyse incident data from threat analytics tools Collaborate with the Security and Threat Intelligence teams by providing indicators of compromise and samples of malware from the customer's environment Develop, document, and implement runbooks, capabilities, and techniques for Incident Response Perform security triage and analysis on endpoint, server and network infrastructure. Perform activities necessary for immediate containment and short-term resolution of incidents. Maintain current knowledge and understanding of the threat landscape, emerging security threats, and vulnerabilities Investigate root cause of complex security incidents Maintain a high level of confidentiality Participate in the on-call rotation as required Candidate must have hands-on experience in customer-facing roles (Customer support experience is preferred). Experience in Cybersecurity and Security Incident Response. Ability to manage complex Incident Response situations with a focus on deep technical troubleshooting and empathetic customer engagement. Practical experience troubleshooting Network, Windows Server, Windows Client, and Active Directory environments. Experience supporting large and complex geographically distributed enterprise environments with 1000+ users. Bachelor's degree in Computer Science, Information Technology (IT), or related field AND demonstrated experience of technical support, technical consulting experience, or information technology experience. Experience in Security Incident Response with recent operational security experience (Indicator of Attack / Indicator of Compromise deep investigation, On-Premises data and Cloud log investigation, Malware Analysis, Threat Analytics, Threat Intelligence, endpoint security, etc.) Experience in Network Security Administration, and/or Systems Administration with experience in Windows Server, Windows Client, and Active Directory Administration Experience in Azure Identity management and troubleshooting Kusto Query Language knowledge Cloud experience with any of the major cloud providers, including cloud security, networking, and migration of multi-cloud or hybrid deployments Automation (PowerShell and/or Python, Java, or a similar language, can be a beginner to intermediate level) English Language: confident in reading, writing and speaking. Technical Support Engineering IC5 - The typical base pay range for this role across Romania is lei 279,700.00 - lei 556,300.00 per year. Certain roles may be eligible for benefits and other compensation.