Cybersecurity Engineer – Incident Response, Threat Detection

🕒 June 27

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Fragomen

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 1951

⚖️ Legal

💼 Consulting

📋 Compliance

Legal • Consulting • Compliance

Fragomen is a global firm of immigration attorneys, solicitors, and consultants that provides immigration and mobility services to employers and individuals worldwide. The firm publishes research and insights (including worldwide immigration trends reports and regional overviews), issues immigration alerts, hosts events and webinars, and operates a Center for Strategy and Applied Insights to develop policy and compliance guidance. Fragomen also engages in technology and strategic partnerships (for example, a joint venture on digital identity solutions) to support immigration compliance, workforce mobility, and related advisory services.

📋 Description

• Lead and support end-to-end incident response activities, including detection, analysis, containment, eradication, and recovery. • Monitor, investigate, and correlate security alerts using SIEM, EDR, and forensic tools. • Perform digital forensic investigations across endpoints, servers, cloud, and network environments. • Triage and escalate security events in accordance with established incident response procedures. • Develop, maintain, and continuously improve incident response playbooks, SOPs, and workflows. • Improve alert quality and response effectiveness through root cause analysis and post-incident reviews. • Partner with IT, Legal, Compliance, Privacy, and Risk teams during security incidents. • Support regulatory, legal, and client-driven incident response and reporting requirements. • Participate in and facilitate incident response tabletop exercises and simulations. • Contribute to the design and enhancement of detection, logging, and monitoring capabilities. • Provide technical guidance and mentorship to junior analysts and security team members.

🎯 Requirements

• 1+ years of experience in cybersecurity, incident response, or security operations. • Hands-on experience responding to security incidents in enterprise environments. • Strong ability to analyze security events and perform technical investigations. • Working knowledge of: TCP/IP, DNS, HTTP/S, VPNs, firewalls, and proxy technologies • Windows and Linux operating systems • Identity and access systems and authentication mechanisms • Experience using SIEM and security platforms such as: Splunk, Microsoft Sentinel, QRadar, ArcSight, ELK, or similar • Ability to identify and respond to: Phishing and business email compromise • Malware and ransomware • Credential compromise • Lateral movement and persistence mechanisms • Brute-force and privilege escalation attacks • Strong written and verbal communication skills, especially during high-pressure incidents. • Demonstrated ability to follow structured processes while continuously improving them.

🏖️ Benefits

• Health insurance • 401(k) matching • Flexible work hours • Paid time off • Remote work options