Senior Incident Response Engineer

Archer
San Jose
Workplace: OnsiteFull timeUSD 144,000 - 180,000 annuallyFunction: Solutions Engineering & Sales EngineeringExperience: 5+ yearsSkills: ["Technical writing","Communication","Leadership","Stakeholder management","Cross-functional collaboration"]

Lead incident response at Archer by serving as the primary internal SIEM engineer and the technical liaison to the MSSP. Triage and validate alerts, drive end-to-end response (identification through recovery), and conduct deep forensic investigations and proactive threat hunts. Build and maintain detection rules in line with MITRE ATT&CK, design SOAR playbooks and log collection for NIST SP 800-171/CMMC Level 2, and support audit readiness through clear documentation and tabletop exercises.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Archer
Archer
23 hours ago

Senior Incident Response Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 8 hours agoStatus: Live
Reposted: similar role first listed 6 months ago

Job Summary

Lead incident response at Archer by serving as the primary internal SIEM engineer and the technical liaison to the MSSP. Triage and validate alerts, drive end-to-end response (identification through recovery), and conduct deep forensic investigations and proactive threat hunts. Build and maintain detection rules in line with MITRE ATT&CK, design SOAR playbooks and log collection for NIST SP 800-171/CMMC Level 2, and support audit readiness through clear documentation and tabletop exercises.
Location: San Jose
Workplace: Onsite
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Mid level

Key Responsibilities

  • •Serve as Archer's primary internal SIEM engineer for triage/validation of alerts, escalation thresholds, and tuning detection rules with the MSSP.
  • •Lead technical response to validated incidents across identification, containment, eradication, and recovery, coordinating cross-functional response teams.
  • •Conduct deep-dive forensic investigations (memory analysis, disk imaging, timeline reconstruction, evidence preservation) and produce incident reports for HR, legal, and regulatory stakeholders.
  • •Execute proactive threat hunts using SIEM data to identify lateral movement, persistence mechanisms, and indicators of compromise (IOCs).
  • •Develop detection rules mapped to MITRE ATT&CK and design/maintain incident response playbooks and SOAR workflows for automation, plus manage IR documentation and audit readiness.

Pay and Benefits

Salary: USD 144,000 - 180,000 annually

Key Requirements

  • •5+ years in incident response or security operations (SOC), including MSSP relationship management, alert triage, and SLA performance.
  • •Hands-on experience investigating incidents from detection through containment and eradication, including malware, phishing, ransomware, and insider threats.
  • •Deep understanding of OS internals (Windows/Mac/Linux), network protocols, and scripting for automation (Python, PowerShell, Bash).
  • •Working knowledge of SIEM platforms (Google SecOps/Chronicle, Splunk, Microsoft Sentinel) and query languages (YARA-L/GoogleSQL, SPL, KQL) for threat hunting and validation.
  • •Hands-on experience with SOAR platforms (Google SecOps/Chronicle, Palo Alto Cortex XSOAR, Splunk Phantom SOAR) to design and execute automated response workflows.
Experience:5+ yearsIncident responseSecurity operations (SOC)Managed security services (MSSP)Threat hunting
Skills:Technical writingCommunicationLeadershipStakeholder managementCross-functional collaboration
Languages:English
Tech Stack:SIEMSOARNIST SP 800-171CMMC Level 2MITRE ATT&CKGoogle SecOps/ChronicleSplunkMicrosoft SentinelYARA-LGoogleSQLSPLKQLPalo Alto Cortex XSOARSplunk Phantom SOARUEBAPythonPowerShellBashIDA ProGhidra

Company Brief

Archer
Develops electric vertical takeoff and landing (eVTOL) aircraft and urban air mobility systems to enable sustainable, intra-city air transportation for passengers and cargo.
Industry: Aerospace Manufacturing
Company Size: Large (251 to 1,000 employees)
Revenue: Pre-Revenue (USD 0)
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Palo Alto, United States
Founded: 2018
WebsiteLinkedIn