Description

You will lead the identification, containment, and recovery of Level 2/3 cyber incidents. You will coordinate technical support for enterprise-wide defense teams and perform incident triage, including scope determination and impact assessment.

Responsibilities

• Support the eradication and recovery of sophisticated cyber incidents.
• Analyze log files to identify threats and vulnerabilities.
• Recommend and implement remediation strategies.
• Track incidents from detection through resolution, ensuring comprehensive documentation.
• Coordinate with third-party vendors and internal teams during response efforts.

Required Skills

• 8+ years in a cyber defense role (or 4+ years with a relevant bachelor's degree).
• Proficiency with EDR tools and Splunk.
• Experience with ESAs, sandboxing, and malware analysis tools.
• Strong understanding of network principles and the cyber incident lifecycle.
• Experience supporting incident response processes.
• Ability to coordinate technical support for defense technicians.

Preferred Skills

• Certifications: GCIH, GSEC, GCIA, or GCFE.
• Capture the Flag (CTF) experience.

Key Skills

Education

Any Graduate