Senior Cybersecurity Incident Handler

About the job

Job Description

The Role

The Cyber Security Incident Handler investigates, coordinates, and resolves cyber security incidents across the enterprise. This role is responsible for the timely triage of alerts, development of investigative hypotheses, evidence collection, host analysis, containment, eradication, recovery support, documentation, and escalation of incidents based on risk and business impact.

In addition to handling incidents, the role improves the repeatability and scalability of response operations by identifying manual or error-prone processes and converting them into documented workflows, automations, integrations, and reusable investigative tools. The successful candidate should be able to develop or maintain Python-based utilities, parsers, dashboards, and command-line tools; build GitHub Actions and CI/CD workflows; and manage security capabilities through Terraform, GitOps, source control, and peer-reviewed deployment practices. The role also supports integrations with threat-intelligence and collaboration platforms such as MISP, Slack, GitHub, Confluence, and Sguil to improve investigation, enrichment, notification, and knowledge sharing.