Cybersecurity Incident Response Engineer, Senior Staff
Technology, Data & Digital · IT Infrastructure & Security · Cybersecurity · DevOps
In short
Synopsys is looking for a Senior Staff Cybersecurity Incident Response Engineer in Morrisville, North Carolina. This role involves investigating high-severity incidents, coordinating global response efforts, and collaborating with internal teams and third-party providers. The engineer will also contribute to improving security capabilities by developing detections, deploying tools, and enhancing processes.
Responsibilities
- Investigate high-severity cybersecurity incidents from detection through containment, determining scope and coordinating response activities across global teams
- Work directly with third-party cybersecurity and forensic providers during significant investigations, managing handoffs and maintaining continuity across teams and time zones
- Correlate and analyze data across multiple log sources, systems, and security technologies to investigate incidents and determine potential impact
- Collaborate with Detection Engineering and Threat Intelligence to improve alert quality, enrich detections, reduce unnecessary noise, and apply lessons learned from investigations
- Develop and tune security detections and contribute to the team's detection library, incident response procedures, documentation, and playbooks
- Deploy and support new security tools and capabilities across endpoint, cloud, and email security environments, including technologies such as CrowdStrike, Wiz, Proofpoint, and Abnormal
- Coordinate incident response activities with teams outside cybersecurity during major investigations and translate technical findings into clear, actionable guidance
- Contribute to security projects between incidents, including implementing new tools, developing automation, and establishing new security capabilities
- Stay current with evolving cyber threats and assess how emerging threats could affect the environment
- Leverage AI technologies, including LLM and agentic solutions, to improve security operations and help address alert scale
Requirements
- 5+ years of hands-on cybersecurity experience in Incident Response, Security Operations, or a related security function, including significant experience investigating cybersecurity incidents
- Strong experience investigating active security incidents, including determining scope, coordinating containment, and working with multidisciplinary teams during response
- Experience working within formal incident response processes and coordinating activities across technical and business teams
- Experience collaborating with third-party cybersecurity or forensic providers during investigations
- Hands-on experience with SIEM and endpoint detection and response technologies, with the ability to investigate and correlate security activity across multiple data sources
- Strong log analysis and network analysis skills with the ability to correlate information across systems and security technologies during investigations
- Strong technical knowledge of common network protocols and technologies, including TCP/IP, HTTPS, FTP, SFTP, SSH, RDP, CIFS/SMB, and NFS
- Familiarity with cloud and SaaS environments, including AWS, Azure, and Microsoft 365
- Strong understanding of Windows environments and general knowledge of Unix, Linux, and macOS
- Understanding of MITRE ATT&CK and the NIST Cybersecurity Framework and how they apply within an enterprise environment
- Practical experience with at least 1 development or scripting language, such as PowerShell, Python, or .NET, as well as regular expressions
- Experience contributing to security initiatives outside active incident response, such as developing detections, deploying security tools, automating processes, or establishing new capabilities
- Strong written and verbal communication skills, with the ability to explain complex security issues clearly to technical and nontechnical stakeholders
- Bachelor's degree in Information Security, Computer Science, or a related discipline, or an equivalent combination of education, training, and experience
Desired Qualifications
- Experience with endpoint, cloud, and email security technologies such as CrowdStrike, Wiz, Proofpoint, or Abnormal is a plus
- Experience with security automation and orchestration technologies, including Microsoft Power Automate or comparable platforms, is a plus
- Experience applying AI technologies, including LLM and agentic solutions, within security operations is a plus
- Relevant security certifications such as GCIH, GCFE, GCFA, GCSA, GMON, CISSP, or similar are a plus
Benefits
- Annual bonus, equity, and other discretionary bonuses may be available.
- Comprehensive health, wellness, and financial benefits.
- Competitive total rewards package.
- Comprehensive medical and healthcare plans.
- ETO and FTO Programs.
- Maternity and paternity leave, parenting resources, adoption and surrogacy assistance.
- Purchase Synopsys common stock at a 15% discount, with a 24 month look-back.
- Retirement plans that vary by region and country.
- Competitive salaries.
Skills
AIGenAICloudCrowdStrikeWizProofpointAbnormalTCP/IPHTTPSFTPSFTPSSHRDPCIFS/SMBNFSAWSAzureMicrosoft 365UnixLinuxmacOSMITRE ATT&CKNIST Cybersecurity FrameworkPowerShellPython.NETPower Automate
#cybersecurity#incident response#security operations#engineering#software
About Synopsys Inc
Smart, Secure Everything—From Silicon to Software Synopsys technology is at the heart of innovations that are changing the way we live and work. The Internet of Things. Autonomous cars. Wearables. Smart medical devices. Secure financial services. Machine learning and computer vision. These breakthroughs are ushering in the era of Smart, Secure Everything―where devices are getting smarter, everything’s connected, and everything must be secure. Powering this new era of technology are advanced silicon chips, which are made even smarter by the remarkable software that drives them. Synopsys is at…
Company
Synopsys IncJob Posted
5 days ago
Employment Type
Full Time
Work mode
On Site
Salary
US$161,000–242,000 / year
Experience Level
Senior
Locations
Morrisville, United States
Qualification
Bachelor
Applicants
Be an early applicant
Similar Jobs
Autoliv
MexicoSharePoint Developer
Full Time Be an early applicant Posted 4 days ago
HCLTech
Hyderabad, India +2 moreSenior Google Cloud & GenAI Engineer
Full Time Be an early applicant Posted 4 days ago
Synopsys Inc
United StatesEnterprise Solutions Architect, Sr Manager
US$151–227k/yr Full Time Be an early applicant Posted 4 days ago
ABB
Germany +2 moreSales Configurator Product Modeler / Developer
Full Time Be an early applicant Posted 3 days ago
Microsoft
United StatesCybersecurity Lead Investigator
US$120–235k/yr Full Time Be an early applicant Posted 3 days ago
Microsoft
United StatesCybersecurity Infrastructure Engineer
US$120–235k/yr Full Time Be an early applicant Posted 3 days ago