> Markdown version of [/jobs/ext/3975506-senior-cybersecurity-incident-response-engineer](https://www.wearedevelopers.com/jobs/ext/3975506-senior-cybersecurity-incident-response-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cybersecurity Incident Response Engineer - **Company:** Synopsys - **Location:** Raleigh, NC, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Secure Shell (SSH), .NET Framework, Microsoft Windows, Artificial Intelligence, Amazon Web Services, Apple Mac Systems, Microsoft Azure, Unix, Server Message Block, Network Analysis, Software as a Service, Cloud Computing, Cyber Security, Linux, Intrusion Detection and Prevention, Python (Programming Language), Log Analysis, Network File Systems, Network Protocols, Windows PowerShell, Regular Expressions, Security Information and Event Management, TCP/IP, Scripting, Remote Desktop Protocol (RDP), File Transfer Protocol (FTP), Microsoft Power Automate, Large Language Models, Mitre Att&ck, Cyber Threat Analysis, Kubernetes, Information Technology, Security Orchestration, Automation & Response - **Published:** October 27, 2026 - **Apply:** https://www.thejobnetwork.com/job/070ca96a-ab7e-4b84-9cb8-d8fbe4091d3d/senior-cybersecurity-incident-response-engineer ## About the Role You are an experienced cybersecurity professional with a strong background in incident response and security operations. You have hands-on experience investigating significant security incidents where quickly determining scope, coordinating containment, and maintaining investigation momentum are critical. \n You are comfortable working with third-party forensic providers, Detection Engineering, Threat Intelligence, and teams outside cybersecurity during active investigations. Between incidents, you contribute to improving security capabilities by developing detections, deploying new security tools, improving processes, and supporting new security initiatives. \n You have a strong technical foundation across endpoint, network, cloud, and email security environments and can correlate and analyze information from multiple data sources to investigate threats and determine their impact. You are comfortable learning new technologies, communicating complex security issues to different audiences, and working across time zones as part of a globally distributed incident response team., * 5+ years of hands-on cybersecurity experience in Incident Response, Security Operations, or a related security function, including significant experience investigating cybersecurity incidents \n * Strong experience investigating active security incidents, including determining scope, coordinating containment, and working with multidisciplinary teams during response \n * Experience working within formal incident response processes and coordinating activities across technical and business teams \n * Experience collaborating with third-party cybersecurity or forensic providers during investigations \n * Hands-on experience with SIEM and endpoint detection and response technologies, with the ability to investigate and correlate security activity across multiple data sources \n * Strong log analysis and network analysis skills with the ability to correlate information across systems and security technologies during investigations \n * Strong technical knowledge of common network protocols and technologies, including TCP/IP, HTTPS, FTP, SFTP, SSH, RDP, CIFS/SMB, and NFS \n * Familiarity with cloud and SaaS environments, including AWS, Azure, and Microsoft 365 \n * Strong understanding of Windows environments and general knowledge of Unix, Linux, and macOS \n * Understanding of MITRE ATT&CK and the NIST Cybersecurity Framework and how they apply within an enterprise environment \n * Practical experience with at least 1 development or scripting language, such as PowerShell, Python, or .NET, as well as regular expressions \n * Experience contributing to security initiatives outside active incident response, such as developing detections, deploying security tools, automating processes, or establishing new capabilities \n * Experience with endpoint, cloud, and email security technologies such as CrowdStrike, Wiz, Proofpoint, or Abnormal is a plus \n * Experience with security automation and orchestration technologies, including Microsoft Power Automate or comparable platforms, is a plus \n * Experience applying AI technologies, including LLM and agentic solutions, within security operations is a plus \n * Relevant security certifications such as GCIH, GCFE, GCFA, GCSA, GMON, CISSP, or similar are a plus \n * Bachelor's degree in Information Security, Computer Science, or a related discipline, or an equivalent combination of education, training, and experience