Principal Incident Response Analyst

The Role

This senior position sits within a Threat Detection and Response team, covering hands-on security incident analysis, digital forensic investigations, and proactive threat hunting. The analyst leads containment and remediation efforts, coordinates with cross-functional teams during active incidents, and applies threat intelligence to strengthen detection capabilities.

Skills & Experience

Candidates need eight or more years of incident response experience, with proficiency in SIEM, EDR, IDS/IPS, and network monitoring tools. Forensic platform experience across EnCase, FTK, Axiom, and Cellebrite is expected. Familiarity with NIST and SANS frameworks is essential. Certifications such as CISSP, GCIH, GREM, GCFA, or ECIH are highly desirable.

Who It Suits

This role suits a seasoned cybersecurity professional comfortable operating at a senior level in complex environments and working effectively under pressure. Someone who thrives investigating intricate incidents, leading threat hunts, and collaborating with legal, law enforcement, and technical stakeholders will find this position particularly rewarding.