Incident Response Analyst
Posted Updated 10
views
Summary
Incident Response Analyst managing daily customer incidents, performing forensic analysis of compromised systems, building IR playbooks, and delivering detailed incident reports at a cybersecurity product company.
- Responsible for daily incident management of customer incidents
- Perform incident response and forensic analysis of compromised systems, identify and provide recommendations for remediation
- Formulate and direct incident response efforts, prioritize those response efforts, and create legible incident reports that describe the compromise vector, attacker methodologies and artifacts
- Ability to manage complicated global incidents
- Ability to perform large-scale compromise assessments for customer environments
- Build incident response plans and playbooks
- Create attack scenarios for customer tabletop training exercises
- Creation of detailed incident reports for customers and effective communication of findings to customers
- Build and maintain sandbox/test lab environments to evaluate malicious code
- Work within a team environment and will be responsible for coordinating work actions
- 10+ years of cybersecurity experience out of which 2-5 years are experience performing incident response with an emphasis on system compromise analysis.
- Experience of performing security reviews/vulnerability risk assessments of network environments using both manual procedures and automated analysis tools.
- Experience with enterprise security solutions, incident crisis management.
- Experience with performing attack simulation for training security teams.
- Experience with creating procedures and documented plans for security teams.
- Ability to participate in on-call rotation, including at least one weekend a month.
- Domestic and International travel may be required.