Overview
The Incident Response Analyst will play a critical role within the cyber security team, focusing on detecting, responding to, and managing security incidents across various platforms. This position requires collaboration with multiple stakeholders to investigate and coordinate responses to threats, as well as to develop and maintain incident response procedures. The contractor will leverage extensive experience in cyber security and forensics to enhance the organization's overall security posture.
Responsibilities
- Monitor and analyse security alerts across various security platforms.
- Validate incidents, assess severity and business impact, and investigate threats.
- Conduct forensic investigations and preserve digital evidence across environments.
- Perform proactive threat hunting and develop detection rules to improve security monitoring.
- Collaborate with teams to manage incidents throughout the response lifecycle.
- Develop and maintain incident response playbooks and standard operating procedures.
- Conduct root-cause analysis and post-incident reviews to enhance response strategies.
- Report incident metrics, trends, risks, and control effectiveness to management.
Requirements
- At least 8 years of experience in incident response and cyber security.
- Strong experience with SIEM, EDR/XDR, and threat investigation.
- Hands-on expertise in Windows/Linux forensics and network analysis.
- Knowledge of NIST incident response guidance and MITRE ATT&CK framework.
- Familiarity with tools such as Microsoft Sentinel, KQL, Python, and PowerShell.
- Degree in Cyber Security, Computer Science, or equivalent experience.
- Relevant certifications such as GCIH, GCFA, or CISSP are advantageous.
- Experience in regulated environments like banking or financial services is preferred.