About the role
About The Company Insight Global is a leading talent solutions provider dedicated to connecting top-tier professionals with innovative organizations across various industries. With a strong commitment to excellence, Insight Global specializes in staffing, consulting, and workforce management solutions designed to meet the evolving needs of its clients. The company prides itself on fostering a collaborative and inclusive work environment, promoting continuous learning, and delivering exceptional service to both clients and candidates. Recognized for its integrity and dedication, Insight Global has established a reputation as a trusted partner in the talent acquisition space, supporting organizations in building high-performing teams that drive business success.
About The Role Insight Global is seeking an experienced Cybersecurity Incident Response Lead to join our dynamic team. In this critical role, you will be responsible for managing and leading the response to complex cybersecurity incidents, including ransomware attacks, phishing campaigns, insider threats, malware infections, credential compromises, and data breaches. This position requires a highly skilled professional with extensive experience in security operations centers (SOCs), incident handling, and forensic investigations. The successful candidate will serve as the technical authority during major security incidents, coordinating cross-functional teams to contain, eradicate, and recover from security threats effectively. This role offers an opportunity to work in a fast-paced environment where your expertise will directly impact the security posture of our organization and clients.
Qualifications The ideal candidate will possess a bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field. A minimum of 10 years of experience in cybersecurity, with significant exposure to SOC operations and incident response functions, is required. Proven experience leading investigations of major cybersecurity incidents and security breaches is essential. Candidates should have a strong understanding of incident response methodologies, attacker tactics, and forensic investigation techniques. Experience working within complex enterprise or global security infrastructures is preferred. Familiarity with SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, Elastic, or LogRhythm, as well as Endpoint Detection and Response (EDR) tools like Microsoft Defender, CrowdStrike, SentinelOne, or Carbon Black, is mandatory. Knowledge of scripting languages (KQL, SPL, Python, PowerShell, Bash), API integrations, and automation workflows is highly desirable. Certifications such as GCIH, GCFA, GCED, CISSP, CSA, or Microsoft Security Operations Analyst are preferred, along with SANS Incident Response training or equivalent.
Responsibilities The key responsibilities for this role include leading the investigation and response efforts for major cybersecurity incidents, ensuring swift containment and remediation. You will perform incident triage, analysis, containment, eradication, recovery, and post-incident activities to minimize impact and prevent recurrence. Conducting root cause and impact analysis will be critical to understanding attack vectors, affected systems, and business implications. You will analyze security alerts, logs, network traffic, endpoint telemetry, cloud activity, and threat intelligence sources to determine the scope of incidents.
Utilizing a variety of security tools such as SIEM, EDR, NDR, cloud security, email security, and identity security platforms, you will investigate security events and correlate data from multiple sources to identify malicious activities and reconstruct attack timelines. Threat hunting activities will be a key aspect of your role, identifying indicators of compromise (IOCs) and attacker Tactics, Techniques, and Procedures (TTPs). You will serve as the technical lead during major incidents, coordinating response efforts across cybersecurity, infrastructure, cloud, application, legal, privacy, and compliance teams.
Providing clear communication, incident updates, and executive briefings will be essential to keep stakeholders informed. You will ensure thorough documentation and regulatory reporting of incidents. Developing, maintaining, and refining incident response playbooks, runbooks, and standard operating procedures will help streamline future responses. You will also design and implement automation workflows using SOAR platforms to enhance investigation efficiency and response consistency. Continuous improvement through lessons learned, threat intelligence, and incident trend analysis will be a core focus, driving enhancements to detection rules, use cases, and response processes.
Benefits Insight Global offers a comprehensive benefits package designed to support the health, well-being, and professional growth of its employees. Employees enjoy competitive compensation, health insurance plans, dental and vision coverage, and life insurance. The company promotes a healthy work-life balance through flexible work arrangements and paid time off policies. Additionally, Insight Global invests in ongoing training and development programs, certifications, and career advancement opportunities. Employees have access to a collaborative work environment that encourages innovation and continuous learning. The organization also provides various employee wellness initiatives and recognition programs to foster a positive and productive workplace culture.
Equal Opportunity
Insight Global is an equal opportunity employer committed to fostering a diverse and inclusive workplace. We do not discriminate based on race, color, religion, sex, national origin, age, disability, veteran status, or any other protected characteristic. We believe that diversity enhances our ability to serve our clients and support our employees. All qualified candidates will receive consideration for employment without regard to any protected status. We are dedicated to creating a work environment where everyone feels valued, respected, and empowered to contribute their best.
Millions of jobs, with real people getting hired every day
Questions, answered
Click "Apply with JobAssist" – we tailor your resume and application to this role and submit it for your approval.
Yes. This role at FetchJobs.co was screened before publishing – we confirmed the employer before listing it.
The employer didn't disclose a salary range for this listing. JobAssist shows pay whenever it's available.
This position can be done from anywhere, with no in-office requirement.
Yes – every application is tailored from your profile and this job's requirements, and you can review and edit before it's sent.