Description

You will lead the identification, investigation, and mitigation of cybersecurity incidents to protect digital assets and ensure regulatory compliance.

Responsibilities

• Monitor security platforms including SIEM, PhiShing, DLP, and Threat Intelligence to triage and prioritize anomalous activities.
• Conduct root cause analysis and lead containment, eradication, and recovery efforts for security events.
• Analyze host-based and network-based artifacts and logs to reconstruct incident timelines and search for indicators of compromise.
• Collect and preserve evidence from endpoints, servers, and logs in a legally defensible manner.
• Maintain and update incident response policies, procedures, and playbooks to align with internal and regulatory mandates.
• Generate technical and executive reports, including metrics, KPIs, and KRIs to measure program effectiveness.
• Collaborate with legal, compliance, and risk teams during major incidents and participate in post-mortem reviews.

Required Skills

• 5+ years of experience in cybersecurity incident response or related roles.
• Deep understanding of the threat landscape and emerging security risks.
• Proficiency in analyzing SIEM, DLP, and Threat Intelligence platform alerts.
• Experience performing host-based and network-based forensic analysis.
• Ability to manage multiple security initiatives simultaneously under minimal supervision.
• Strong documentation skills for maintaining incident playbooks and audit evidence.
• Knowledge of regulatory and compliance requirements within the financial services industry.
• Ability to communicate technical business impacts to senior leadership.
• Bachelor's degree or equivalent graduate-level education.

Key Skills

Education

Any Gradute