Truist Financial - Atlanta, GA
posted 6 months ago
The Senior IR Engineer within the advanced 24/7 Cyber Incident Response Team (CIRT) is a critical role responsible for receiving, investigating, and resolving all escalations effectively. This position requires a strong foundation in Digital Forensics & Incident Response (DFIR), where professionals must be adept in log, packet, network, endpoint, and root cause analysis. The Senior IR Engineer is expected to possess a problem-solving mentality, capable of navigating structured, unstructured, and complex situations with ease. A key aspect of this role is the ability to respond to and eradicate advanced attacks, necessitating a deep understanding of Windows internals. Threat hunting will also be a significant component of the job, requiring the engineer to quickly differentiate between nefarious artifacts and benign activity. The Senior IR Engineer will consult on various technical and non-technical problems within the team and the larger organization, contributing to the overall security posture of the enterprise. This position is on-site in downtown Atlanta, with an alternate location in Zebulon, NC, and involves participation in an on-call rotation. The shift options include a 2nd Shift from 3pm to 12am (midnight), Sunday to Thursday, or a 2nd Shift from 1pm to 12am (midnight), Friday through Monday. The role includes a 10% automatic pay differential for 2nd shift hours.