Description

You will execute cyber-security incident detection and response functions while contributing to the maturity of team processes and frameworks.

Responsibilities

• Respond to cyber-security threats, vulnerabilities, events, and incidents.
• Act as a technical contributor during major security incidents.
• Improve operational maturity through the development of playbooks, automation, and efficient methodologies.
• Develop detection strategies including attack models, use cases, and tuning.
• Participate in the planning and execution of purple teaming activities.

Required Skills

• 5+ years of experience in incident detection and response.
• Experience working in a CSOC or CIRT performing level 2 or level 3 support.
• Proficiency with incident response methodologies and the Lockheed Martin Cyber Kill Chain.
• Hands-on experience with Splunk, Crowdstrike, Microsoft Defender, FireEye, or Akamai.
• Technical knowledge of Azure, AWS, or Google Cloud platforms.
• Deep understanding of Windows, Linux, Active Directory, DNS, DHCP, SMTP, and TCP/IP.
• Competency in malware analysis and reverse engineering using static and dynamic analysis.
• Experience performing vulnerability assessments and penetration testing across network, infrastructure, and applications.
• Ability to work within a business hours and rostered on-call environment.

Preferred Skills

• SANs GIAC certifications such as GCIH, GCFA, GREM, or GPEN.
• Offensive Security Certified Professional (OSCP) certification.

Key Skills

Education

Any Graduate