Information Security Engineer - Senior Incident Handler

Salary Range >

-  USD Overview

Serve as Senior Incident Handler:
Acts as a senior escalation point for complex or high-impact incidents, supporting the SOC Associate Director in managing incident flow, prioritizing response efforts, and ensuring consistent, effective incident handling across the SOC.

Perform Advanced Incident Analysis:
Performs and reviews complex investigations, correlating host, network, cloud, identity, and application data to determine root cause, attack path, and impact of security events. Ensures high-quality documentation and investigative rigor.

Drive Incident Response Process Maturity:
Leads the evolution of incident response playbooks, workflows, and automation to improve consistency, efficiency, and across a wide range of threat scenarios.

Enhance Detection and Response Enablement:
Partners with Security Engineering team to identify response gaps, inform detection improvements, and advance automation that improves incident handling and operational effectiveness.

Provide Technical Leadership and Mentorship:
Provides senior-level technical guidance and mentorship across SOC operations, strengthening investigative skills, decision-making, and overall incident response capability.

Lead Post-Incident Reviews and Knowledge Sharing:
Facilitates lessons‑learned activities, drives remediation tracking, and ensures insights from incidents are incorporated into detection improvements, response processes, and analyst development.

Support Threat Intelligence and Readiness

Activities:

Translates emerging threats into actionable incident response improvements and participates in tabletop exercises and SOC readiness assessments.

• Well‑developed analytical, critical thinking and problem‑solving skills.
• Well‑developed interpersonal, written, communication, presentation, and organizational skills.
• Proven ability to lead and manage staff.
• Proven ability to manage multiple or complex projects, meeting deadlines and budget.
• Expert knowledge of commonly used concepts, practices, and procedures.

• Actively develop solutions to detect and prevent network intrusions.
• Serve as lead for moderately complex risk assessments.
• Manage the development and implementation of action plans.
• Oversee the periodic assessment of systems.
• Participate in the development of program control processes to ensure risk mitigation.
• Develop and deliver information security training material.
• Provide guidance to and may supervise level 1‑3 analysts.
• Research the latest information security trends and emerging threats.

Bachelor's Degree and seven years of experience or equivalent education and experience.

• Well‑developed analytical, critical thinking and problem‑solving skills.
• Well‑developed interpersonal, written, communication, presentation, and organizational skills.
• Proven ability to lead and manage staff.
• Proven ability to manage multiple/complex projects, meeting deadlines and budget.
• Expert knowledge of commonly used concepts, practices, and procedures.

02/02/2026

Professional

NON

GS-4

GS-4i

Full time

Staff

Remote

150 Munson Street, New Haven, Connecticut

All candidates for employment will be subject to pre‑employment background screening for this position, which may include motor vehicle, DOT certification, drug testing and credit checks based on the position description and job requirements. All offers are contingent upon the successful completion of the background check. For additional information on the background check requirements and process visit Learn about background checks under the Applicant Support Resources section of Careers on the It's Your Yale website.

Certain positions have associated health requirements based on specific job responsibilities. These may include vaccinations, tests, or examinations, as required by law, regulation, or university policy.

Salary offers are determined by a candidate’s qualifications, experience skills, and education in…