Cybersecurity Incident Response Engineer, Senior Staff

Teknik, data och digitalt · IT-infrastruktur och säkerhet · Cybersäkerhet · DevOps

I korthet

Synopsys is looking for a Senior Staff Cybersecurity Incident Response Engineer in Morrisville, North Carolina. This role involves investigating high-severity incidents, coordinating global response efforts, and collaborating with internal teams and third-party providers. The engineer will also contribute to improving security capabilities by developing detections, deploying tools, and enhancing processes.

Ansvarsområden

Investigate high-severity cybersecurity incidents from detection through containment, determining scope and coordinating response activities across global teams
Work directly with third-party cybersecurity and forensic providers during significant investigations, managing handoffs and maintaining continuity across teams and time zones
Correlate and analyze data across multiple log sources, systems, and security technologies to investigate incidents and determine potential impact
Collaborate with Detection Engineering and Threat Intelligence to improve alert quality, enrich detections, reduce unnecessary noise, and apply lessons learned from investigations
Develop and tune security detections and contribute to the team's detection library, incident response procedures, documentation, and playbooks
Deploy and support new security tools and capabilities across endpoint, cloud, and email security environments, including technologies such as CrowdStrike, Wiz, Proofpoint, and Abnormal
Coordinate incident response activities with teams outside cybersecurity during major investigations and translate technical findings into clear, actionable guidance
Contribute to security projects between incidents, including implementing new tools, developing automation, and establishing new security capabilities
Stay current with evolving cyber threats and assess how emerging threats could affect the environment
Leverage AI technologies, including LLM and agentic solutions, to improve security operations and help address alert scale

Krav

5+ years of hands-on cybersecurity experience in Incident Response, Security Operations, or a related security function, including significant experience investigating cybersecurity incidents
Strong experience investigating active security incidents, including determining scope, coordinating containment, and working with multidisciplinary teams during response
Experience working within formal incident response processes and coordinating activities across technical and business teams
Experience collaborating with third-party cybersecurity or forensic providers during investigations
Hands-on experience with SIEM and endpoint detection and response technologies, with the ability to investigate and correlate security activity across multiple data sources
Strong log analysis and network analysis skills with the ability to correlate information across systems and security technologies during investigations
Strong technical knowledge of common network protocols and technologies, including TCP/IP, HTTPS, FTP, SFTP, SSH, RDP, CIFS/SMB, and NFS
Familiarity with cloud and SaaS environments, including AWS, Azure, and Microsoft 365
Strong understanding of Windows environments and general knowledge of Unix, Linux, and macOS
Understanding of MITRE ATT&CK and the NIST Cybersecurity Framework and how they apply within an enterprise environment
Practical experience with at least 1 development or scripting language, such as PowerShell, Python, or .NET, as well as regular expressions
Experience contributing to security initiatives outside active incident response, such as developing detections, deploying security tools, automating processes, or establishing new capabilities
Strong written and verbal communication skills, with the ability to explain complex security issues clearly to technical and nontechnical stakeholders
Bachelor's degree in Information Security, Computer Science, or a related discipline, or an equivalent combination of education, training, and experience

Önskade kvalifikationer

Experience with endpoint, cloud, and email security technologies such as CrowdStrike, Wiz, Proofpoint, or Abnormal is a plus
Experience with security automation and orchestration technologies, including Microsoft Power Automate or comparable platforms, is a plus
Experience applying AI technologies, including LLM and agentic solutions, within security operations is a plus
Relevant security certifications such as GCIH, GCFE, GCFA, GCSA, GMON, CISSP, or similar are a plus

Förmåner

Annual bonus, equity, and other discretionary bonuses may be available.
Comprehensive health, wellness, and financial benefits.
Competitive total rewards package.
Comprehensive medical and healthcare plans.
ETO and FTO Programs.
Maternity and paternity leave, parenting resources, adoption and surrogacy assistance.
Purchase Synopsys common stock at a 15% discount, with a 24 month look-back.
Retirement plans that vary by region and country.
Competitive salaries.

Färdigheter

AIGenAICloudCrowdStrikeWizProofpointAbnormalTCP/IPHTTPSFTPSFTPSSHRDPCIFS/SMBNFSAWSAzureMicrosoft 365UnixLinuxmacOSMITRE ATT&CKNIST Cybersecurity FrameworkPowerShellPython.NETPower Automate

#cybersecurity#incident response#security operations#engineering#software

Om Synopsys Inc

Smart, Secure Everything—From Silicon to Software Synopsys technology is at the heart of innovations that are changing the way we live and work. The Internet of Things. Autonomous cars. Wearables. Smart medical devices. Secure financial services. Machine learning and computer vision. These breakthroughs are ushering in the era of Smart, Secure Everything―where devices are getting smarter, everything’s connected, and everything must be secure. Powering this new era of technology are advanced silicon chips, which are made even smarter by the remarkable software that drives them. Synopsys is at…

Se alla lediga jobb hos Synopsys Inc Läs mer om Synopsys Inc Webbplats

Företag

Synopsys Inc

Publicerade jobb

för 4 dagar sedan

Anställningstyp

Heltid

Arbetsform

På plats

Lön

161 000–242 000 US$ / år

Erfarenhetsnivå

Senior

Platser

Morrisville, United States

Kvalifikation

Kandidatexamen

Sökande

Ansök tidigt

Liknande jobb

Saab

Huskvarna, Sweden

Cybersecurity Incident Response Engineer, Senior Staff

Ansvarsområden

Krav

Önskade kvalifikationer

Förmåner

Färdigheter

Om Synopsys Inc

Liknande jobb

Linjechef TSIT

Customer Identity and Access Management (CIAM) Consultant

Cybersecurity Consultant to Accenture

Head of integration platforms

Master Thesis: Supply Chain Cybersecurity Assurance

Security Research IC5