Description

You will lead incident response efforts and manage the end-to-end lifecycle of cybersecurity incidents.

Investigate, triage, and document information security issues, emerging threats, and escalated SOC incidents. Contain incidents by isolating affected systems, collecting digital evidence, and analyzing logs to provide remediation strategies. Perform root cause analysis (RCA) and research data enrichment to provide deep threat analysis. Develop and document incident response playbooks, standard operating procedures, and technical processes. Collaborate with internal and external stakeholders to communicate mitigation recommendations and neutralization steps.

Required Skills

• 5+ years of experience as a lead investigator, with at least 2.5 years focused on cyber incident response
• Deep understanding of logging mechanisms across Windows, Linux, and macOS platforms
• Expertise in analyzing security events including Phishing, Malware, DoS/DDoS, Ransomware, and application-specific attacks
• Proficiency with EDR, Anti-Virus, HIPS, NIDS/NIPS, Full Packet Capture, Network-Based Forensics, and Encryption
• Strong knowledge of enterprise network architecture and scalable infrastructure
• Ability to perform threat hunting and utilize security tools to determine incident impact and scope
• Proven experience in Incident Response Playbook (IRP) creation and execution
• Linux proficiency

Preferred Skills

• Advanced certifications including SANS GIAC (GCIA, GCIH), CISSP, CASP, or CCNA

Key Skills

Education

ANY GRADUATE