Senior Cyber Incident Responder

Highmark Health is hiring a Senior Cyber Incident Responder to serve as the lead investigative authority within its Cyber Fusion Center, based on-site at Carson Mall in Carson City.

About the Role

This is the most senior hands-on investigative position in the Cyber Fusion Center. You will own the full incident lifecycle — from initial detection and triage through containment, eradication, recovery, and post-incident review — while holding the team to the highest standards of documentation and process discipline under the organization's Cyber Incident Response Plan (CIRP). You will also be called upon to lead security projects and provide subject matter expertise across the broader organization.

What You'll Do

• Lead complex, high-severity incident investigations end-to-end, serving as the primary decision-maker on escalated cases
• Apply advanced forensic and analytical techniques to investigate intrusions, malware infections, data exfiltration events, insider threats, and other cyber incidents
• Ensure every incident is thoroughly documented and formally closed in accordance with the CIRP
• Coordinate cross-functional response activities, aligning security operations, IT, legal, and executive stakeholders during active events
• Conduct proactive threat hunting and compromise assessments to surface threats before they escalate
• Develop and continuously improve playbooks, runbooks, and standard operating procedures
• Facilitate post-incident reviews and translate findings into measurable security improvements
• Mentor and guide junior analysts, elevating overall team capability
• Drive cross-organizational security initiatives at the direction of Cyber Fusion Center leadership

What We're Looking For

• Demonstrated experience leading incident response across a broad range of threat types and attack vectors
• Deep knowledge of incident response frameworks such as NIST SP 800-61 or the SANS PICERL model
• Hands-on proficiency with digital forensics tools (e.g., EnCase, FTK, Volatility) and enterprise EDR platforms
• Strong skills in network traffic analysis, log correlation, and SIEM operations
• Experience with malware triage and reverse engineering fundamentals
• Scripting ability in Python, PowerShell, or comparable languages to automate investigative workflows
• Familiarity with cloud environments and the incident response considerations they introduce
• Excellent written and verbal communication skills, including executive-level briefing ability
• Proven capacity to lead calmly and decisively during high-pressure, high-stakes incidents

About Highmark Health

Highmark Health is one of the largest integrated health organizations in the United States, spanning health insurance, hospital systems, and related services that collectively serve millions of members and patients. Protecting the integrity and confidentiality of that health data is foundational to its mission — making this Senior Cyber Incident Responder role central to the organization's continued ability to deliver a remarkable health experience.

How to Apply

Ready to bring your incident response expertise to a high-impact security team? Submit your application for this full-time Senior Cyber Incident Responder position at Highmark Health in Carson City directly through this listing.