L3 Security / Incident Response Engineer

Who are we?

IBEX Staffing Solutions is a forward-thinking recruitment firm specializing in remote and IT staffing. We connect exceptional global talent with innovative companies, helping businesses scale and thrive in a digital-first world.

About the role

We are looking for an experienced to join one of our MSP partners and serve as a senior technical resource for complex security investigations, major incidents, and advanced customer escalations.

This role goes beyond alert monitoring. You will take ownership of sophisticated security incidents, conduct deep investigations across endpoint, identity, cloud, email, network, and SIEM environments, and determine appropriate containment and remediation actions.

The ideal candidate has strong incident response and threat-hunting experience, understands how attackers move through an environment, and can confidently communicate technical findings and recommendations to both internal teams and customers.

Key Responsibilities

• Lead and own complex security investigations and major incidents from escalation through resolution.
• Investigate threats across endpoint, identity, cloud, email, network, and SIEM environments.
• Perform threat hunting, analyze attack chains, and determine the scope, blast radius, and root cause of incidents.
• Make and execute approved containment, eradication, and remediation decisions.
• Correlate security telemetry and evidence to identify attacker activity, persistence, lateral movement, and impact.
• Conduct post-incident analysis and recommend improvements to detections, controls, and response playbooks.
• Support technical customer escalations, clearly communicating findings, risks, and recommended actions.
• Collaborate with L2 security operations and other technical teams and provide guidance on complex security cases.

Qualifications and Requirements

• 5+ years of experience in cybersecurity, security operations, incident response, or related roles, with strong experience handling complex incidents.
• Hands-on experience with incident response, threat hunting, and security investigations, preferably in an MSP, MSSP, SOC, or enterprise environment.
• Strong understanding of attack techniques, incident lifecycle, and MITRE ATT&CK.
• Experience investigating across multiple security technologies, including EDR/XDR, SIEM, identity, email, network, and cloud security platforms.
• Strong knowledge of Windows/Active Directory and working knowledge of Azure and/or AWS security.
• Ability to analyze logs, telemetry, and forensic evidence to reconstruct attack activity and determine impact.
• Strong decision-making and problem-solving skills, particularly during high-severity security incidents. Excellent communication skills with the ability to explain complex security findings to technical teams and customers.