Remote (United States) role reporting to the CISO to build and operate detection and response capabilities. Responsibilities include incident investigation and containment, forensic analysis, hypothesis-driven threat hunts, reviewing MSSP/MDR escalations, improving detection coverage, and maintaining operational runbooks. Requires 7+ years in cybersecurity operations/incident response with hands-on experience in cloud and endpoint tooling.