Tektend LLC is seeking a skilled and proactive Cyber Incident Responder to join our cybersecurity operations team based in Austin, TX on a hybrid basis. In this role, you will be on the front lines identifying, containing, and remediating high-severity cyber incidents across enterprise and cloud infrastructures to safeguard critical organizational assets.
Key Responsibilities:
- Lead end-to-end incident response operations, including active containment, eradication, and comprehensive post-incident recovery.
- Perform in-depth host, memory, and network forensics to establish root cause, dwell time, and attack progression.
- Execute proactive threat hunting missions using telemetry from EDR, SIEM, and network monitoring platforms.
- Triage and analyze suspicious files, scripts, and binaries to extract actionable indicators of compromise (IOCs).
- Author detailed technical post-incident reports and communicate security risks and remediation paths clearly to executive leadership.
Candidate Requirements:
- 3+ years of hands-on experience in dedicated cyber incident response, digital forensics (DFIR), or advanced SOC operations.
- Strong working knowledge of enterprise EDR solutions (e.g., CrowdStrike Falcon, SentinelOne) and modern SIEM architectures.
- Demonstrated proficiency in Windows and Linux internals, network protocols, and the MITRE ATT&CK framework.
- Experience scripting in Python, PowerShell, or Bash to automate forensic workflows and log parsing.
- Industry-recognized certifications such as GCIH, GCFA, GNFA, or CISSP are strongly preferred.
- Must be based within commuting distance of Austin, TX to support the hybrid work schedule.
