Description

What's the Job?

• Support the identification, containment, eradication, and recovery of sophisticated level 2/3 cyber incidents.
• Coordinate and provide expert technical support to enterprise-wide cyber defense technicians to resolve security incidents.
• Analyze log files from various sources to identify potential threats and vulnerabilities.
• Perform cyber defense incident triage, including scope determination and impact assessment, and recommend remediation strategies.
• Track and document cyber defense incidents from initial detection through resolution, ensuring comprehensive reporting and artifact collection.

What's Needed?

• 8+ years of experience in a cyber defense role or 4+ years with a relevant bachelor's degree.
• Proficiency with EDR tools, Splunk, and experience with ESAs, sandboxing, and malware analysis tools.
• Strong understanding of network principles and the cyber incident lifecycle.
• Experience supporting incident response processes and coordinating with third-party vendors and internal teams.
• Preferred certifications include GCIH, GSEC, GCIA, GCFE, or capture the flag experience

Key Skills

Education

Any Graduate