Security Incident Responder

Responsibilities

• Lead large-scale incident response investigations and proactive threat-hunting initiatives using the MDR platform
• Conduct log analysis and cloud artifact reviews using EDR and similar tools
• Investigate and respond to security incidents in containerized environments, specifically Kubernetes
• Research evolving cyberattack TTPs to strengthen customer defenses
• Provide technical and executive briefings to customers with risk mitigation recommendations
• Collaborate with engineering and research teams to enhance MDR capabilities
• Partner with customer IT, DevOps, and Security teams for service integration

Requirements

• 3-5 years in incident response and threat hunting
• Strong experience in cloud security (AWS, Azure, GCP)
• Expertise in Kubernetes security, container orchestration, and cluster hardening
• Deep understanding of network architecture, protocols, and OS internals (Windows, Linux, Unix)
• Proven incident response experience in complex environments
• Excellent written and verbal communication skills

Preferred Qualifications

• Scripting skills in Python or PowerShell
• Experience with Red Team operations or penetration testing
• Hands-on knowledge of MITRE ATT&CK, Metasploit, or Cobalt Strike
• Proficiency in host forensics, memory forensics, and malware analysis

About the Company

Snowbit provides Managed Detection and Response (MDR) services to protect customers from advanced cyber threats.