Lead, Cyber Defense & Incident Response

Lead Digital Forensics & Incident Response for Prudential's Global Technology. Conduct enterprise-wide investigations across on-prem and cloud environments, leveraging Splunk SPL and KQL, EDR tooling, and forensic software; drive automation and threat-hunting initiatives.

• Scope and perform enterprise-wide, global investigations across on-prem and cloud technologies
• Leverage Splunk's SPL and Kusto Query Language (KQL) in support of investigative workflows
• Utilize EDR tooling to perform enterprise-wide investigations and analysis
• Perform log, host, memory, and network-based forensics in support of active investigations
• Lead and contribute to unique team-driven projects and automation with XSOAR

Technical scope includes cloud/on-prem forensics, Splunk SPL and KQL-based investigations, XSOAR automation, and enterprise EDR tooling. Strong emphasis on MITRE ATT&CK and Cyber Kill Chain for threat modeling and remediation.

The ideal candidate is a seasoned insider risk and digital forensics professional with 5+ years of incident response experience, capable of leading investigations across global scales and cloud/on-prem environments. They excel at applying MITRE ATT&CK and Cyber Kill Chain frameworks, communicating findings to executives, and driving automation with XSOAR and forensic tools.

Required