Incident Response & Security Operations Engineer

Magnet Forensics is a global leader in the development of digital investigative software, and they are seeking an Incident Response & Security Operations Engineer to lead security incident response efforts and strengthen operational security practices. This role involves coordinating response activities during security incidents and ensuring effective detection and response functions at scale.

Responsibilities:

• Lead security incidents from initial triage through containment, remediation, recovery, and closure
• Assess alert severity, scope, and business impact to determine appropriate response actions
• Coordinate response efforts across IT, Business Systems, Compliance, Legal, and other stakeholders as needed
• Lead incident bridges and response coordination during active events
• Ensure incidents conclude with clear outcomes, documentation, and follow‑through
• Availability to respond and investigate incidents as part of the 365/24/7 SOC/NOC
• Own the operational relationship with managed detection and response providers
• Review and validate alert quality, relevance, and escalation decisions
• Ensure third‑party security services align with Magnet’s risk tolerance and operational needs
• Drive improvements in alert routing, escalation paths, response workflows, and automation
• Act as the internal authority on what constitutes actionable security signal
• Ensure vulnerability management and detection processes reduce exposure windows and support timely remediation
• Improve visibility into vulnerability trends and patching progress over time
• Identify and resolve operational bottlenecks that slow remediation or response efforts
• Partner with IT teams to improve workflows, ownership, and accountability
• Learn and utilize Magnet Forensics Axiom as part of incident investigation and response activities
• Support investigations involving computer, mobile device, and cloud data using a unified forensic platform
• Apply Axiom workflows to interrogate and analyze digital evidence during security incidents
• Leverage Magnet Axiom microlearning to build practical, real‑world forensic capability
• Ensure investigative findings support incident understanding, decision‑making, and documentation
• Serve as the escalation point for security tooling vendors when issues impact response timelines or risk reduction
• Hold vendors accountable to operational expectations and support commitments
• Evaluate tooling effectiveness from an operational and risk‑reduction perspective
• Ensure security tools integrate cleanly into existing workflows
• Produce clear incident documentation including root cause, impact, response actions, and lessons learned
• Lead post‑incident reviews and ensure corrective actions are tracked and implemented
• Identify recurring incident patterns and drive long‑term improvements to reduce repeat issues
• Act as the primary security point of contact during incidents for IT and Business Systems teams
• Communicate clearly and calmly during high‑pressure situations
• Translate technical security findings into business‑relevant risk and impact
• Support readiness activities such as tabletop exercises and response testing

Requirements:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or equivalent practical experience
• Demonstrated experience leading or coordinating security incident response efforts
• Experience working in a co‑managed SOC or managed detection and response environment
• Broad security operations experience across endpoint, email, identity, vulnerability management, SaaS, and cloud environments
• Strong judgment in assessing alert severity, business impact, and escalation needs
• Ability to operate effectively with incomplete or ambiguous information
• Strong written communication skills, including incident summaries and RCA documentation
• Proven ability to coordinate across multiple teams during operational events
• Process‑oriented mindset with a focus on continuous improvement
• Experience supporting or participating in digital investigations or forensic workflows
• Familiarity with Magnet Forensics Axiom or similar digital forensic platforms
• Experience with tools such as Microsoft Defender, Proofpoint, Tenable, Jira, and related security platforms
• Experience supporting compliance or audit activities related to incident response
• Participation in tabletop exercises or incident readiness programs
• Experience mentoring or guiding analysts during incident response
• CISSP or CISM
• Microsoft Cybersecurity Architect Expert, or Azure Solutions Expert
• GCIH, GCED, or GCFA
• GCFA, GCFE, GNFA, or GCIA
• Digital forensics or incident response certifications aligned to enterprise environments
• Relevant vendor or platform‑specific certifications