Incident Response Analyst

Description

• Responsible for handling day-to day operations to monitor, identity, triage and investigate security events from various Endpoint (EDR), Network and Cloud security tools and detect anomalies, and report remediation actions
• Perform basic forensics and malware analysis based on our playbooks and procedures
• Collaborate with stakeholders in building and improving our Security Orchestration Platform
• Responsible for working in a 24/7 environment including night shifts and the shifts are decided based on the business requirement
• Clearly document notes for incidents in our case management solution
• Help create and maintain process tools and documentation
• Analyze firewall logs, server, and application logs to investigate events and incidents for anomalous activity and produce reports of findings
• Perform all stage of incident response from detection to postmortem
• Conduct reviews and analysis of proxy logs, Microsoft Windows and Active Directory logs, and malicious code to identify, contain, eradicate, and ensure recovery from incidents

Requirements

• 2+ years of cyber security experience in incident response
• Experience performing security monitoring, response capabilities, log analysis and forensic tools
• Ability to support off-hours, weekends, and holidays if needed in support of incident response
• BS in Computer Science, Information Security, or equivalent professional experience
• Ability to design playbooks for responding to security incidents
• Technical depth in one or more specialties including: Malware analysis, Host analysis and Digital forensics
• Strong understanding of Security Operations and Incident Response process and practices
• Excellent critical thinking and analytical skills, organizational skills, and the ability to work as part of a team
• Strong understanding of operating systems including Windows, Linux and OSX
• One or more security-related certifications from any of the following organizations: GCIH, GCFE, GCFA, AWS, Azure Cloud security Certifications or equivalent is desired
• Advanced interpersonal skills to effectively promote ideas and collaboration at various levels of the organization
• Experience with SIEM, SOAR, EDR, Network, AWS, and Azure security tools
• Excellent verbal and written communication skills
• Maintain a high level of confidentiality and Integrity

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance