Tektend LLC is seeking a talented and proactive Cyber Incident Responder to join our security operations team in Austin, TX on a hybrid schedule. In this mission-critical role, you will serve as a frontline defender detecting, investigating, and eradicating cyber threats across hybrid cloud and on-premises enterprise environments.
Key Responsibilities:
- Lead end-to-end incident handling, triage, containment, and eradication for complex security events and potential breaches.
- Execute deep-dive host and network digital forensics to identify root causes, attacker tactics, techniques, and procedures (TTPs).
- Conduct proactive hypothesis-driven threat hunting exercises utilizing EDR telemetry, SIEM event logs, and threat intelligence.
- Collaborate with cross-functional IT and engineering teams to recommend and implement defensive remediation and mitigation controls.
- Draft thorough post-incident review reports, technical debriefs, and optimize incident response playbooks.
Requirements:
- 3+ years of dedicated experience in incident response, CSIRT, or a Tier 2/3 SOC capacity.
- Demonstrated proficiency with enterprise EDR platforms (CrowdStrike, SentinelOne) and SIEM systems (Splunk, Microsoft Sentinel).
- Strong knowledge of networking protocols, Windows/Linux operating system internals, and the MITRE ATT&CK framework.
- Relevant industry certifications (e.g., GCIH, GCFA, GNFA, or CySA+) are preferred.
- Ability to work hybrid out of our Austin, TX office with rotational on-call duties.
