Role: Security and Incident Response Lead
Location: Dallas, TX or Scottsdale, AZ (most be local to either Dallas or Scottsdale but will work remotely)
Synonymous Business Title (s): Security Architect
Overview:
What you’ll do:
- Monitor and Analyze Security Alerts - Review alerts generated by security systems, appliances, and logs to determine the appropriate course of action to protect the enterprise and reduce overall risk.
- Incident Triage and Response - Quickly assess, prioritize, and respond to security incidents, ensuring timely containment, eradication, and recovery to minimize business impact.
- Root Cause Analysis (RCA) - Investigate security incidents to determine root causes, attack vectors, and vulnerabilities, providing recommendations to reduce the attack surface and prevent recurrence.
- Threat Hunting and Proactive Defense - Conduct proactive threat-hunting activities based on intelligence, anomalies, and adversary tactics to identify and mitigate threats before they escalate.
- Collaboration with Cross-Functional Teams - Work closely with IT, engineering, legal, compliance, and other teams to coordinate incident response efforts and ensure an effective security posture.
- Incident Documentation and Reporting - Maintain detailed documentation of security incidents, response actions, and lessons learned, ensuring continuous improvement in security processes.
- Develop and Improve Incident Response Playbooks - Enhance and maintain incident response procedures, ensuring alignment with industry best practices and emerging threats.
- Security Awareness and Training - Provide guidance, training, and mentorship to SOC analysts and IT staff on security threats, incident handling, and response best practices.
- Threat Intelligence Integration - Leverage threat intelligence sources to stay informed on evolving cyber threats and proactively adjust security strategies to defend against them.




What we are looking for:
- Bachelor's degree in Computer Science, Information Security, or related equivalent degree. In lieu of Bachelor's Degree, 8+ years of professional experience in information security, information technology or cybersecurity required.
- 5+ years of experience in information security, cybersecurity, or security.
- Knowledge of security frameworks such as NIST and ISO 27001
- Familiarity with security regulations and standards (e.g. PCI DSS, HIPAA, etc.)
- Experience with incident response methodologies and tools (e.g. SANS IR, Threat Intelligence, etc.)
- Knowledge of various operating systems, networks, and security technologies
- Security+ or Certified Incident Handler (GCIH) or equivalent certification preferred
- Security Information and Event Management (SIEM)
- Endpoint Detection and Response (EDR) / Extended Detection and Response (XDR)
- Network Security Monitoring & Intrusion Detection/Prevention Systems (IDS/IPS)
- Threat Intelligence Platforms (TIP)
- Security Orchestration, Automation, and Response (SOAR)
- Digital Forensics and Incident Response (DFIR) Tools
- Malware Analysis & Reverse Engineering Tools
- Vulnerability Management & Assessment
- Web Application Security Testing Tools
- Cloud Security Monitoring & Protection
- Deception & Honeypot Technologies
- Data Loss Prevention (DLP)
- Privileged Access Management (PAM) & Identity Security
- Firewall & Next-Generation Firewall (NGFW) Solutions
LI-MH1
Our Values
If you want to know the heart of a company, take a look at their values. Ours unite us. They are what drive our success - and the success of our customers. Does your heart beat like ours? Find out here:
Core Values
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.

📌 Security and Incident Response (Monterrey)
🏢 Blue Yonder
📍 Monterrey