Staff Cyber Incident Response Engineer

Adobe

Staff Cyber Incident Responder improving Adobe's cyber defense capabilities against evolving threats. Leading incident response processes and team mentorship within a fast-paced environment.

Posted 6/14/2026full-timeSan Jose • California, Utah, Washington • 🇺🇸 United StatesLead💰 $168,200 - $310,100 per yearWebsite

Tech Stack

Tools & technologies

AWSAzureCloudDockerGoogle Cloud PlatformKubernetesLinuxMacOSPythonRuby

About the role

Key responsibilities & impact

Lead and conduct comprehensive host forensics, network forensics, log analysis, and malware triage to support incident response investigations.
Create and enhance scripts, tools, and methodologies to automate and improve our incident investigation processes.
Provide leadership and mentorship to the incident response team, acting as a resource and guide for other team members.
Partner with multiple internal and external organizations. Draft detailed reports, assign remediation actions, and implement improvements.
Develop and present comprehensive reports, training sessions, and presentations for both technical and non-technical audiences.
Participate in and help conduct tabletop exercises and incident simulations to ensure readiness.
Collaborate with the Adobe Threat Hunting Team to conduct proactive and iterative hunts through cloud and enterprise networks, endpoints, and datasets to detect malicious or suspicious activities that have evaded existing detection tools.

Requirements

What you’ll need

7+ years of proven experience in end-to-end incident response processes, including leading complex, multi-functional incidents.
Strong investigative background with expertise in Windows analysis and forensics.
Experience working in container environments such as Kubernetes and Docker.
Hands-on experience with various Endpoint Detection and Response (EDR) solutions.
Deep understanding of the internals and constructs of Linux, MacOS, and Windows operating systems.
Extensive experience in administering, attacking, or defending cloud environments (AWS, Azure, GCP).
Deep understanding of logs from cloud, network, and endpoint devices.
Excellent skills in writing complex searches or analytics for popular Security Information and Event Management (SIEM) solutions.
Proficiency in bash and at least one interpreted programming language (Python, Ruby, etc.).
Strong ability to promote a collaborative working environment that enhances teamwork, predictability, clarity, and a culture of innovation.
Ability to handle multiple tasks in a fast-paced environment effectively.
Willingness to participate in an on-call rotation as required.

Benefits

Comp & perks

Opportunities for professional growth and development through challenging projects and ongoing training
Health insurance
Retirement plans
Paid time off
Flexible work arrangements
Innovation culture

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

host forensicsnetwork forensicslog analysismalware triageWindows analysisKubernetesDockerEndpoint Detection and Response (EDR)Security Information and Event Management (SIEM)bash

Soft Skills

leadershipmentorshipcollaborationcommunicationteamworkadaptabilityproblem-solvingtrainingpresentation skillstime management