Incident Response Analyst
Posted
Summary
Leads investigation and response for major cybersecurity incidents — containment, eradication, recovery, digital forensics, and malware/IOC analysis — across endpoint, network, server, application, and cloud environments. Requires deep IR experience, MITRE ATT&CK/SIEM/EDR-XDR knowledge, and GCIH/GREM/OSCP-level certification.
Responsible for leading major cyber incident response, digital investigation, containment, eradication, recovery, and coordination of specialized response activities.
Key Responsibilities:
- Lead investigation and response for critical and high-severity cybersecurity incidents.
- Coordinate containment, eradication, recovery, evidence preservation, and post-incident activities.
- Perform advanced incident analysis across endpoint, network, server, application, and cloud environments.
- Lead malware, IOC, forensic, and attack-path investigations and support threat hunting.
- Develop and maintain incident response plans, procedures, playbooks, and escalation mechanisms.
- Coordinate with SOC, infrastructure, application, cloud, legal/compliance, and customer stakeholders during major incidents.
- Conduct root-cause analysis and prepare detailed incident reports and remediation recommendations.
- Support red-team findings, security assessments, and improvement of detection and response capabilities
Required Certifications: GCIH / GREM / OSCP or equivalent
Required Skills:
- Strong incident response and cyber investigation experience.
- Knowledge of digital forensics, malware analysis, threat hunting, network/endpoint investigation, and evidence handling.
- Understanding of attacker tactics and techniues, MITRE ATT&CK, SIEM, EDR/XDR, and security controls.
- Experience in managing major incidents and coordinating multidisciplinary response teams.
