Senior Cyber Incident Responder

We are seeking an experienced Senior Cyber Incident Responder to investigate and respond to complex cybersecurity incidents across our organization.

In this role, you will conduct advanced investigations, perform root cause analysis, and contribute to the continuous improvement of our detection and response capabilities. You will also collaborate closely with cross-functional teams, support threat hunting activities, and help strengthen organizational readiness through knowledge-sharing and incident simulations.

Responsibilities

• Respond to complex cybersecurity incidents, ensuring timely investigation, containment, eradication, and recovery
• Serve as a senior technical responder during major security incidents, working alongside the Incident Response Manager and key stakeholders throughout the incident lifecycle
• Conduct advanced investigations involving endpoint, network, identity, cloud, and application-based threats
• Perform root cause analysis and develop actionable recommendations to prevent recurrence
• Support digital forensics and evidence collection activities when required
• Analyze attacker tactics, techniques, and procedures (TTPs) to understand threat actor activity and improve detection and response capabilities
• Collaborate with Cyber Defense, Infrastructure, Cloud, Application, Risk, Legal, Privacy and other business teams during incident investigations
• Produce clear and concise incident reports, executive summaries, and post-incident reviews
• Contribute to the development and improvement of incident response procedures, playbooks, and operational documentation
• Support threat hunting activities and the continuous enhancement of detection and response capabilities
• Provide guidance to junior analysts during investigations and participate in knowledge-sharing sessions, workshops, tabletop exercises, and incident simulations
• Support Tier 2 by sharing comprehensive company insights and knowledge to enhance operational efficiency
• Participate in on-call rotation once a month for 12-hour shifts (passive on-call)

Requirements

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field, or equivalent practical experience
• 5+ years of experience in cybersecurity, with significant experience in Incident Response, Digital Forensics, or Security Operations
• Hands-on experience responding to and investigating complex cybersecurity incidents
• Understanding of incident response methodologies, attack lifecycle concepts, and threat actor tactics and techniques
• Background in conducting investigations across endpoint, network, identity, cloud, and enterprise environments
• Expertise in performing root cause analysis and developing remediation recommendations
• Strong analytical, investigative, and problem-solving skills
• Capability to communicate effectively with both technical and non-technical stakeholders
• Proficiency in creating operational documentation, reports, and technical procedures
• Excellent written and verbal communication skills in English (B2+ level)

We offer

We believe that the greatest strength of the company is its people. EPAM is fully committed to help its employees to reach their full potential and achieve their professional goals through continues learning. With this in mind, we would like to introduce to you few of the many opportunities and services which we believe will help you expand your current knowledge:

• Full access to cutting-edge tools and technologies
• Competitive compensation depending on experience and skills
• All-around Social package: professional & soft skills training, medical & family care programs, sports
• Free English classes
• Unlimited access to LinkedIn learning solutions
• Continuous experience exchange with experts and professionals worldwide
• Friendly team and comfortable working environment
• Engineering, corporate, and social events within and outside the Company
• Flexible working schedule
• Opportunities for self-realization

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.

Hybrid in Romania: Bucharest