Sr Cyber Resiliency Engineer-REMOTE

Carle Health is hiring a Senior Cyber Resiliency Engineer to strengthen enterprise incident response and cyber resiliency. The role leads and supports incident investigations and recovery, improves security detection and response capabilities, and develops procedures, playbooks, and team expertise.

Responsibilities:

• Serves as a senior technical escalation resource in coordination with the SOC, leading and supporting the investigation, scoping, containment, eradication and recovery activities for cybersecurity incidents
• Utilizes extensive hands-on cybersecurity experience across security operations, risk and vulnerability management, endpoint, network, identity, cloud and log data to assess current state, determine root cause, evaluate business impact and identify affected systems
• Partners with cybersecurity leadership, infrastructure, application, identity, exposure management and other IT teams to assess security gaps, facilitate collaborative solution discussions and drive remediation actions to completion
• Develops and maintains incident response procedures, technical playbooks, escalation standards, detection content, response workflows and supporting documentation
• Evaluates and advances SIEM, EDR, alerting, automation and other cybersecurity capabilities that strengthen detection, investigation, containment, recovery and resiliency
• Leads lessons learned and after-action review activities; documents findings, evidence, improvement opportunities and accountable action items
• Participates in tabletop exercises, incident simulations and technical validation activities to improve response readiness
• Works closely with legal, compliance, privacy and other departments to support coordinated incident-management activities
• Monitors emerging threats, vulnerabilities and threat intelligence, and recommends tactical process improvements and long-term maturity enhancements to detection and response capabilities
• Mentors team members on incident response procedures, investigations, security tools, documentation and effective cross-functional coordination