Incident Response Specialist
Summary
Investigate and respond to cybersecurity incidents, lead threat containment, and develop response playbooks for an in-house engineering team.
Job description:
We are seeking a Cybersecurity Incident Response Specialist to manage and respond to security incidents across the organization. The role focuses on detecting threats, analyzing security events, and executing effective response strategies to protect systems, data, and infrastructure.
Key Responsibilities:
Identify, analyze, and respond to security incidents and unauthorized access attempts in real-time.
Lead containment and eradication efforts to minimize the impact of cyber threats.
Conduct threat hunting and proactive security monitoring.
Prepare detailed technical reports and provide actionable security recommendations.
Investigate security incidents including malware infections, phishing attacks, unauthorized access, and data breaches.
Lead incident response lifecycle: detection, analysis, containment, eradication, and recovery.
Perform digital forensics and root cause analysis to prevent recurrence.
Develop and maintain incident response playbooks and procedures.
Collaborate with SOC, IT, and network teams for coordinated response.
Requirements
Requirements:
Should have relevant experience in IT infrastructures or network security.
Candidates with OSCP, CRTO, GCTI, CISSP, or CISM certifications are preferred .
Knowledge of frameworks such as NIST, MITRE ATT&CK, and ISO 27001.
Experience in network security, endpoint security, and incident investigation.
Familiarity with scripting (Python, PowerShell, or Bash) is an advantage.
Relevant certifications such as CEH, GCIH, CISSP, or similar are preferred.
Strong analytical, problem-solving, and communication skills.
Ability to work in a fast-paced environment and handle critical incidents.
Location: Qatar