{"id":3277277,"url":"https://alion.io/job/synopsys-incident-response-sr-staff-engineer-19166","title":"Incident Response, Sr Staff Engineer, 19166","company":{"id":39954,"name":"Synopsys","domain":"synopsys.com","url":"https://alion.io/company/synopsys-inc","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Avature","truth_index":{"grade":"A","score":100,"open_postings":74,"ghost_share":0.041,"stale_share":0,"repost_share":0.189,"time_to_fill_p50_days":15,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Morrisville, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":112000,"max_usd":224000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":451},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":".NET","optional":false},{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"Unix","optional":false},{"name":"Windows","optional":false},{"name":"Wiz","optional":false},{"name":"C#","optional":true},{"name":"Power Automate","optional":true}],"status":"live","first_seen_at":"2026-10-26T15:12:19Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-10-27T05:37:26Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Job Description and Requirements\nWe Are\nSynopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products. We deliver industry-leading silicon design, IP, simulation and analysis solutions, and design services. We partner closely with our customers across a wide range of industries to maximize their R&D capability and productivity, powering innovation today that ignites the ingenuity of tomorrow.\nYou Are\nYou are an experienced cybersecurity professional with a strong background in incident response and security operations. You have hands-on experience investigating significant security incidents where quickly determining scope, coordinating containment, and maintaining investigation momentum are critical.\nYou are comfortable working with third-party forensic providers, Detection Engineering, Threat Intelligence, and teams outside cybersecurity during active investigations. Between incidents, you contribute to improving security capabilities by developing detections, deploying new security tools, improving processes, and supporting new security initiatives.\nYou have a strong technical foundation across endpoint, network, cloud, and email security environments and can correlate and analyze information from multiple data sources to investigate threats and determine their impact. You are comfortable learning new technologies, communicating complex security issues to different audiences, and working across time zones as part of a globally distributed incident response team.\nWhat You'll Be Doing\nInvestigate high-severity cybersecurity incidents from detection through containment, determining scope and coordinating response activities across global teams\nWork directly with third-party cybersecurity and forensic providers during significant investigations, managing handoffs and maintaining continuity across teams and time zones\nCorrelate and analyze data across multiple log sources, systems, and security technologies to investigate incidents and determine potential impact\nCollaborate with Detection Engineering and Threat Intelligence to improve alert quality, enrich detections, reduce unnecessary noise, and apply lessons learned from investigations\nDevelop and tune security detections and contribute to the team's detection library, incident response procedures, documentation, and playbooks\nDeploy and support new security tools and capabilities across endpoint, cloud, and email security environments, including technologies such as CrowdStrike, Wiz, Proofpoint, and Abnormal\nCoordinate incident response activities with teams outside cybersecurity during major investigations and translate technical findings into clear, actionable guidance\nContribute to security projects between incidents, including implementing new tools, developing automation, and establishing new security capabilities\nStay current with evolving cyber threats and assess how emerging threats could affect the environment\nLeverage AI technologies, including LLM and agentic solutions, to improve security operations and help address alert scale\nThe Impact You'll Have\nStrengthen East Coast incident response coverage\nReduce time to containment during high-severity incidents through strong investigative capability and cross-functional coordination\nImprove detection quality and reduce alert fatigue by feeding investigation findings back into Detection Engineering and enriching alerts with relevant context\nExpand the security program's capabilities through new tools, detections, automation, and security initiatives\nHelp protect Synopsys infrastructure and intellectual property through effective investigation and response to cybersecurity incidents\nBuild institutional knowledge by documenting investigations, strengthening response procedures and playbooks, and sharing knowledge across the globally distributed team\nSupport continuous improvement of tooling, detections, processes, and response capabilities between active incidents\nWhat You'll Need\n5+ years of hands-on cybersecurity experience in Incident Response, Security Operations, or a related security function, including significant experience investigating cybersecurity incidents\nStrong experience investigating active security incidents, including determining scope, coordinating containment, and working with multidisciplinary teams during response\nExperience working within formal incident response processes and coordinating activities across technical and business teams\nExperience collaborating with third-party cybersecurity or forensic providers during investigations\nHands-on experience with SIEM and endpoint detection and response technologies, with the ability to investigate and correlate security activity across multiple data sources\nStrong log analysis and network analysis skills with the ability to correlate information across systems and security technologies during investigations\nStrong technical knowledge of common network protocols and technologies, including TCP/IP, HTTPS, FTP, SFTP, SSH, RDP, CIFS/SMB, and NFS\nFamiliarity with cloud and SaaS environments, including AWS, Azure, and Microsoft 365\nStrong understanding of Windows environments and general knowledge of Unix, Linux, and macOS\nUnderstanding of MITRE ATT&CK and the NIST Cybersecurity Framework and how they apply within an enterprise environment\nPractical experience with at least 1 development or scripting language, such as PowerShell, Python, or .NET, as well as regular expressions\nExperience contributing to security initiatives outside active incident response, such as developing detections, deploying security tools, automating processes, or establishing new capabilities\nStrong written and verbal communication skills, with the ability to explain complex security issues clearly to technical and nontechnical stakeholders\nExperience with endpoint, cloud, and email security technologies such as CrowdStrike, Wiz, Proofpoint, or Abnormal is a plus\nExperience with security automation and orchestration technologies, including Microsoft Power Automate or comparable platforms, is a plus\nExperience applying AI technologies, including LLM and agentic solutions, within security operations is a plus\nRelevant security certifications such as GCIH, GCFE, GCFA, GCSA, GMON, CISSP, or similar are a plus\nBachelor's degree in Information Security, Computer Science, or a related discipline, or an equivalent combination of education, training, and experience\nThe Team You'll Be Part Of\nYou will join the global CSIRT team, which is distributed across Chile, Bangalore, Ireland, and the U.S. East and West Coasts, with the largest concentration of team members in Bangalore. The team balances two primary areas of focus: responding to high-severity cybersecurity incidents and investigations, and advancing security projects and capabilities between incidents, including implementing tools, creating detections, improving automation, and establishing new security capabilities.\nAt Synopsys, we want talented people of every background to feel valued and supported to do their best work. Synopsys considers all applicants for employment without regard to race, color, religion, national origin, gender, sexual orientation, age, military veteran status, or disability.\nIn addition to the base salary, this role may be eligible for an annual bonus, equity, and other discretionary bonuses. Synopsys offers comprehensive health, wellness, and financial benefits as part of a competitive total rewards package. The actual compensation offered will be based on a number of job-related factors, including location, skills, experience, and education. Your recruiter can share more specific details on the total rewards package upon request. The base salary range for this role is across the U.S.","description_format":"text","description_chars":7819,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Simulation & Digital Twin Software","Information Security","Semiconductor IP & Chip Design Services"],"lifecycle":[{"event":"open","at":"2026-10-26T15:12:19Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 178 · green card filings: 177","filings_12m":178,"filings_prev_12m":208,"green_card_filings_12m":177,"median_offered_wage_usd":157472,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":4}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":15,"reasons":["conf:0","velocity","win:early","comp:brand"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/synopsys-incident-response-sr-staff-engineer-19166","json_url":"https://alion.io/job/synopsys-incident-response-sr-staff-engineer-19166.json","meta":{"generated_at":"2026-10-27T07:07:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7450,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":39954},"rest":"https://alion.io/mcp/rest/get_company?id=39954"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsynopsys-incident-response-sr-staff-engineer-19166"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsynopsys-incident-response-sr-staff-engineer-19166"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsynopsys-incident-response-sr-staff-engineer-19166"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/synopsys-incident-response-sr-staff-engineer-19166\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsynopsys-incident-response-sr-staff-engineer-19166"}]}