Description

Lead identification, triage, and mitigation of complex security threats and vulnerabilities in on-prem and major cloud environments.

Responsibilities

• Lead investigations into security breaches, documenting findings and remediation recommendations.
• Execute incident response plans, including containment, eradication, and recovery strategies.
• Perform in-depth analysis of security alerts to determine root cause and impact.
• Develop and maintain playbooks, SOPs, and security policies to improve response strategies.
• Mentor Level 1 Security Analysts and assist with incident escalations.

Required Skills

• 4+ years of relevant cybersecurity work experience.
• Proficiency with Endpoint Detection and Response (EDR) tools such as CrowdStrike or Carbon Black.
• Strong forensic analysis skills using tools like EnCase or FTK for root cause analysis.
• Deep understanding of threat hunting, alert logic, and alert tuning.
• Experience with cybersecurity principles and protocols in on-prem and major cloud environments.
• Proven ability to lead complex incident response efforts and post-incident reviews.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or equivalent experience.

Preferred Skills

• CISSP, OSCP, or CISM certifications.

Key Skills

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology