Description

You will own incident investigation, response, and forensics across on-premise and cloud environments, serving as the primary technical contact for management.

This role is remote.

Responsibilities

• Lead incident response and investigation for escalated security events.
• Perform network and system forensics in AWS and Azure environments.
• Optimize security monitoring tools to improve detection capabilities.
• Track, document, and close post-incident response action items.
• Train junior responders on investigation and resolution steps.

Required Skills

• 7+ years in cybersecurity incident response or threat detection.
• Expertise with SIEM, EDR, IDS/IPS, and Firewalls.
• Deep knowledge of Windows, Linux, and macOS security mechanisms.
• Experience with cloud security and incident response in AWS and Azure.
• Strong understanding of network protocols and architecture.
• Ability to automate tasks using Python, PowerShell, Perl, or Bash.
• Understanding of attacker Tactics, Techniques, and Procedures (TTPs).

Preferred Skills

• Ability to articulate complex technical concepts to non-technical audiences.
• Experience with Google Cloud security tools.

Key Skills

Education

Any Gradute