Qualifications

• 3-5 years of cybersecurity experience focused on incident response, SOC operations, or cyber defense.
• Hands-on experience with SIEM, EDR/XDR, and log analysis tools (e.g., Splunk, Sentinel, CrowdStrike).
• Practical understanding of incident response methodologies and frameworks like MITRE ATT&CK and NIST.
• Familiarity with threat hunting, malware analysis, or forensic investigation techniques.
• Exposure to cloud environments (AWS, Azure, or GCP) and modern enterprise architectures is preferred.
• Strong analytical and problem-solving skills with clear communication of technical findings.
• Relevant certifications (e.g., Security+, GCIH, GCIA) are a plus.

Responsibilities

• Monitor, triage, and investigate security alerts and events across various systems.
• Support incident response activities including analysis, containment, remediation, and documentation.
• Execute and improve established incident response playbooks.
• Perform threat hunting activities to identify potential compromises and detection gaps.
• Leverage threat intelligence to guide investigations and tune detection systems.
• Collaborate with Security Engineering to enhance detection logic and security controls.
• Produce concise incident reports and assist with root cause analysis and remediation efforts.

Benefits

• Control Risks offers a competitive compensation and benefits package with transparency.
• Discretionary bonus scheme based on company and individual performance.
• Support for hybrid working arrangements that prioritize in-person collaboration.
• Comprehensive medical, dental, and vision benefits, along with life and disability coverage.
• 401(K) retirement plan and additional voluntary benefits offered.
• Employee assistance program and nationwide pet insurance.