Overview
The Incident Response Analyst will play a critical role in managing and mitigating cybersecurity incidents. Working in a hybrid capacity, the analyst will monitor and analyze security alerts across various platforms, collaborate with different teams for incident management, and conduct forensic investigations. This position emphasizes proactive threat detection and response, ensuring continuous improvement of incident response protocols in alignment with industry standards.
Responsibilities
- Monitor and analyze security alerts using SIEM, EDR/XDR, and other cybersecurity tools.
- Validate incidents and assess severity, coordinating response and recovery activities.
- Conduct forensic investigations across various environments to preserve digital evidence.
- Perform proactive threat hunting and develop detection rules to enhance security measures.
- Collaborate with cross-functional teams to manage incidents throughout their lifecycles.
- Develop and maintain incident response documentation and playbooks.
- Conduct post-incident reviews and provide detailed metrics and reports to management.
Requirements
- Minimum of 8 years' experience as an Incident Response Analyst.
- Strong expertise in Cyber Security and incident management practices.
- Hands-on experience with SIEM and EDR/XDR platforms, Windows/Linux forensics, and cloud security.
- Familiarity with NIST incident response guidance and MITRE ATT&CK framework.
- Experience with security tools like Microsoft Sentinel, Defender XDR, and forensic tools such as Wireshark.
- Degree in Cyber Security, Computer Science, or equivalent practical experience.
- Relevant certifications (e.g., GCIH, GCFA, GCIA, CySA+) are preferred.
- Experience in regulated environments like banking or financial services is advantageous.