Incident Responder

About the role

Analyze network evidence, assess suspicious behavior, and help turn technical findings into cases operators can act on. You will also test and improve how CrunchAtlas investigates and documents activity across IT and OT environments.

What you will do

• Review network traffic, alerts, enrichment, and related evidence during investigations.
• Document timelines, affected systems, supporting evidence, conclusions, and recommended next steps.
• Validate product findings against realistic threat behavior and incident scenarios.
• Research adversary techniques and translate lessons into investigation and detection improvements.
• Work with engineering to improve case quality, reporting, and analyst workflows.

What we are looking for

• Experience in incident response, threat analysis, network defense, or a closely related discipline.
• Strong understanding of TCP/IP, common protocols, endpoint and network telemetry, and attacker behavior.
• Experience with packet analysis, SIEM, IDS, EDR, or forensic tools.
• Ability to separate evidence from assumption and communicate conclusions clearly.
• Experience with OT environments, MITRE ATT&CK, scripting, or malware analysis is useful.
• Located in New Hampshire