Description

You will lead the identification, containment, and recovery of Level 2/3 cyber incidents.

This role is remote.

Responsibilities

• Lead incident triage, scope determination, and impact assessment for sophisticated cyber events.
• Support eradication and recovery efforts while coordinating technical support for enterprise-wide defense teams.
• Analyze log files to identify threats, vulnerabilities, and malicious activity.
• Recommend and implement remediation strategies to secure the environment.
• Track incidents from detection through resolution with comprehensive documentation and vendor coordination.

Required Skills

• 8+ years in a cyber defense role, or 4+ years with a relevant bachelor's degree.
• Proficiency with EDR tools and Splunk for log analysis and threat hunting.
• Experience with Enterprise Security Appliances (ESAs), sandboxing, and malware analysis tools.
• Strong understanding of network principles and the full cyber incident lifecycle.
• Proven ability to coordinate technical support for defense technicians and internal teams.
• Experience supporting and executing formal incident response processes.

Preferred Skills

• Certifications: GCIH, GSEC, GCIA, or GCFE.
• Active Capture the Flag (CTF) experience.

Key Skills

Education

Any Graduate