Note: The job is a remote job and is open to candidates in USA. Atlas Search is seeking a Blue Team Lead to serve as a senior escalation point and incident commander for complex cyber incidents. This role involves hands-on investigation and response leadership, along with stakeholder communication and continuous improvement across various environments.
Responsibilities
- Lead high-severity incident response, including triage, containment, coordination, executive updates, and resolution
- Investigate threats across endpoint, network, identity, cloud, SaaS, runtime, and on-prem environments
- Partner with internal teams, MSSPs, legal/compliance, and business stakeholders during active incidents
- Improve response playbooks, escalation criteria, simulations, post-incident reviews, and remediation tracking
- Translate incident learnings into stronger detection coverage, automation, workflows, and tooling
- Support SOAR or AI-assisted response workflows with proper governance, auditability, and human oversight
Skills
- 6+ years of experience in incident response, security operations, or blue team roles
- Experience leading high-severity incidents as an escalation lead or incident commander
- Strong background investigating cloud, SaaS, identity, endpoint, network, and hybrid infrastructure incidents
- Knowledge of IAM abuse, federated identity, token theft, conditional access, MFA, and cloud-native environments
- Familiarity with MITRE ATT&CK, threat-informed defense, SOAR, automation, and response metrics
- Experience working with MSSPs, distributed teams, or hybrid SOC models
- Strong communication skills, including executive-level incident updates
- Exposure to AI-assisted SOC or incident response tooling
- Experience with purple teaming, detection validation, or adversary simulation tools
- Ability to influence engineering improvements for telemetry, enrichment, and response workflows
Company Overview