Description

You will lead cyber incident response efforts, managing the full lifecycle from assessment and containment to mitigation and documentation.

Responsibilities

• Perform in-depth analysis and investigations on escalated events to determine containment, remediation, and eradication strategies.
• Research and evaluate new technologies including Anti-APT, SOAR, deception technologies, and big data forensic tools.
• Define and update incident response playbooks to align with industry best practices.
• Drive execution of daily, weekly, and monthly metrics for statistical threats and KPIs.
• Coordinate with global stakeholders and senior management during high-severity incidents to ensure timely communication.

Required Skills

• 7-11 years of specific Information Security experience.
• Subject matter expertise in Incident Response, Forensic analysis, Malware analysis, Intrusion analysis, and Crisis Management.
• Strong working knowledge of SIEM, AV, vulnerability scanners, proxies, WAF, Netflow, IDS, and forensic tools.
• In-depth knowledge of malware families and network attack vectors.
• Proficiency in log analysis across network, security, access, OS, and application layers.
• Strong knowledge of Operating System internals, specifically Linux and Windows.
• Scripting experience using Python, PowerShell, or VBScript.
• Experience with product suites such as McAfee, FireEye, CrowdStrike, or Cylance.

Preferred Skills

• GIAC, CISSP, or CEH certifications.

Key Skills

Education

Bachelor's degree