Senior Cyber Incident Responder
Labcorp · Durham, NC
IT & SoftwareFull timeCompany career page
The apply link worked recently (not employer-confirmed).
Role summary
Labcorp seeks a Senior Cyber Incident Responder to lead investigations and containment of security incidents affecting clinical operations, electronic health records, and patient data. The role involves coordinating with technical and clinical teams, performing forensic analysis across multiple platforms, and ensuring compliance with healthcare regulations in a hybrid Durham or Burlington, NC position.
What they're looking for
- Bachelor's degree
- 3+ years cybersecurity experience
- 5+ years Windows and Linux OS investigations and EDR telemetry analysis
- 2+ years incident response frameworks (NIST 800-61, HITRUST IRM) and adversary models (MITRE ATT&CK)
- 2+ years SIEM and EDR platforms (Splunk, CrowdStrike, SentinelOne) and forensic tools
- Large enterprise incident response experience (30K+ users)
- Strong HIPAA, HITECH, and healthcare regulatory knowledge
What you'll be doing
- Lead triage, containment, and root cause analysis for validated cyber incidents impacting clinical systems and patient data
- Investigate across Windows, Linux, iOS, and cloud platforms using SIEM, EDR, and manual log analysis
- Coordinate with technical and clinical stakeholders to contain threats across hospitals, clinics, and remote environments
- Develop and improve incident response plans aligned with healthcare-specific threats
- Conduct stakeholder briefings during high-severity incidents and write post-incident reports
Compensation$75,000 - $160,000 annual salary
Privacy & handoff
This role links to Labcorp's own application system. RoleLantern records your interest and checks the link, but the application happens on the employer's site and status updates may not come back to us. Clicking apply does not mark you as applied automatically.