Principal Cybersecurity Incident Responder

🔥 0 minutes ago

🚗 Michigan – Remote

🚗 Michigan – Remote

💵 $135.6k - $293.7k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Stryker

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1941

🏥 Healthcare

💼 Consulting

📦 Logistics

Healthcare • Consulting • Logistics

Stryker is a global leader in medical technology, providing innovative products and services across the healthcare sector. With a presence in countries across the Americas, Asia Pacific, Europe, and the Middle East & Africa, Stryker offers a wide range of medical technologies, including orthopedic implants, surgical equipment, and advanced hospital devices. The company is committed to improving patient outcomes and healthcare efficiency. Stryker continues to expand its global reach, offering localized solutions to meet diverse healthcare needs worldwide.

📋 Description

• Lead the technical response to significant and complex cybersecurity incidents from initial investigation through containment, eradication, and recovery • Establish technical priorities, maintain momentum, and make timely, risk-based decisions amid incomplete, conflicting, or rapidly changing information • Partner with Investigations, Detection Engineering, Security Engineering, CTI, Threat Hunting, Forensics, Security Operations, and other teams to determine incident scope and coordinate response actions • Apply knowledge of attacker tactics, techniques, and procedures to incidents involving identity compromise, ransomware, malware, cloud compromise, lateral movement, data exfiltration, and other advanced threats • Evaluate investigative findings, identify critical gaps, test hypotheses, and translate evidence into containment, eradication, and recovery strategies • Balance rapid containment with business impact, operational continuity, evidence preservation, and full incident-scope understanding • Develop and improve incident response playbooks, procedures, technical capabilities, exercises, telemetry, tooling, automation, and lessons-learned processes • Design and facilitate technical tabletop exercises and simulations • Identify telemetry, tooling, access, and visibility gaps and strengthen detection and response capabilities with technical teams • Leverage AI, automation, and orchestration with appropriate human oversight • Lead technical contributions to post-incident reviews and drive improvements across telemetry, detections, tooling, automation, procedures, and training • Serve as a senior technical resource and mentor across the cybersecurity organization

🎯 Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Security, or a related field, or an equivalent combination of education and relevant professional experience • 8+ years of relevant cybersecurity experience across incident response, digital forensics, threat hunting, security operations, security engineering, or related disciplines • Relevant industry certifications in incident response, digital forensics, security operations, cloud security, or related cybersecurity disciplines preferred • Demonstrated experience leading the technical response to significant or complex cybersecurity incidents involving multiple technical teams and stakeholders • Significant hands-on experience investigating and responding to a range of sophisticated cyberattacks • Strong understanding of modern attacker tactics, techniques, and procedures • Broad technical knowledge of endpoint, identity, network, cloud, email, and enterprise security technologies, including investigative telemetry • Demonstrated ability to evaluate evidence, test hypotheses, identify investigative gaps, and make sound decisions with incomplete or rapidly changing information • Experience developing or improving incident response playbooks, procedures, exercises, or operational capabilities • Ability to communicate complex technical situations clearly and concisely to technical responders, cybersecurity leadership, and non-technical stakeholders • Ability to coordinate and influence cross-functional technical teams without direct authority and operate effectively in a high-pressure, global environment • Preference for candidates located in Eastern or Central time zones • CISSP, GCIH, ECIH, OSIR, GCFA, GCFE, CHFI, CISM, or GSOC certifications preferred

🏖️ Benefits

• Remote work flexibility • Travel opportunity (20%)

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume