Responsibilities may include the following and other duties may be assigned:
· Lead end-to-end cyber incident investigations, driving response activities from identification through resolution and post-incident review
· Investigate security alerts and suspicious activity across endpoint, identity, cloud, email, and network environments
· Utilize SIEM, CrowdStrike, EDR, XDR, and other security platforms to identify, investigate, and respond to cyber threats
· Conduct digital forensic investigations to determine attacker behavior, root cause, scope of compromise, and business impact
· Coordinate response and remediation activities with Security Operations, Information Technology, Privacy, Legal, and business stakeholders
· Develop and enhance investigation workflows, response playbooks, operational dashboards, and automation capabilities
· Drive process improvements that increase efficiency, visibility, and incident response effectiveness
· Communicate technical findings and incident updates to both technical and non-technical audiences, including leadership teams
· Participate in the team’s on-call rotation and support high-priority incidents as required
· Contribute to a collaborative culture focused on teamwork, knowledge sharing, and continuous improvement