Senior Incident Response Engineer

Stack

Responsibilities

• ▹Develop and document incident handling guides and processes
• ▹Prioritize events using tools to correlate data and reduce false positives
• ▹Analyze and tune security alerts, create new signals based on signatures and behavior
• ▹Respond to security incidents and perform forensics on IT systems
• ▹Lead mitigation strategies for identified vulnerabilities and threats
• ▹Design and maintain security alerts, automated actions, and escalation workflows for 24/7 incident response
• ▹Conduct threat hunting activities and anticipate future threats
• ▹Assist with implementation of countermeasures or mitigating controls
• ▹Develop and maintain incident response capabilities in public cloud environments
• ▹Prepare incident reports on analysis methodology and results
• ▹Recognize intrusion attempts through review and analysis of event details
• ▹Partner with stakeholders to improve the incident response feedback loop
• ▹Develop monthly reporting dashboards and metrics
• ▹Prepare executive summaries and briefings on significant investigations

Requirements

• ▹Experience in crisis management, preventing incidents from escalating
• ▹Insight into leveraging incidents to drive innovation and awareness
• ▹Passion for automation, delegation, and scalability via playbooks
• ▹Drive for automating detection, containment, and elimination of malicious actors
• ▹Expertise in SIEM, centralized logging, and enrichment solutions (endpoint protection, Panther, Crowdstrike, AWS Security Hub)
• ▹Practical experience with cloud technologies, building and deploying with Terraform
• ▹Experience building and deploying solutions (Ansible, Terraform)
• ▹Competency in Linux and Windows
• ▹Ability to automate workflows via Python or JavaScript

Soft skills

About the company

Kong Inc. is a leading developer of API and AI connectivity technologies, building the infrastructure that powers the agentic era. Trusted by the Fortune 500 and startups alike.