Security Operations and Engineering I Analyst III

POSITION SUMMARY

The Senior Incident Responder to lead cybersecurity incident response efforts, mitigate threats, and enhance our organization's security resilience. This role involves identifying, analyzing, and responding to complex security incidents, collaborating with cross-functional teams, and improving incident response strategies. The ideal candidate will have extensive experience in threat detection, digital forensics, and incident management.

RESPONSIBILITIES

• Lead the investigation, containment, eradication, and recovery of cybersecurity incidents.
• Analyze security alerts, logs, and forensic data to assess the impact and scope of incidents.
• Develop and refine incident response processes, playbooks, and procedures.
• Collaborate with internal and external stakeholders, including IT, legal, and law enforcement, to manage incidents effectively.
• Conduct root cause analysis and provide recommendations to prevent future incidents.
• Guide and mentor junior analysts in incident handling and threat detection.
• Perform threat hunting activities to proactively identify and mitigate security risks.
• Utilize SIEM, EDR, forensic tools, and threat intelligence platforms to detect and analyze threats.
• Stay updated on emerging threats, vulnerabilities, and industry best practices.
• Participate in cybersecurity tabletop exercises and red/blue team engagements.

QUALIFICATIONS

• Candidate must be a degree holder in Computer Science, Computer Engineering, Information Technology or equivalent qualifications 
• 5+ years of experience in cybersecurity, with at least 3 years in incident response or a similar role.
• Strong knowledge of threat landscapes, attack techniques (MITRE ATT&CK), and security frameworks (NIST, ISO 27001).
• Proficiency in forensic analysis, malware analysis, and log analysis.
• Experience with SIEM, EDR, IDS/IPS, and other security technologies.
• Knowledge of scripting languages (Python, PowerShell, Bash) for automation.
• Strong analytical, problem-solving, and communication skills.
• Relevant certifications preferred (e.g., GCFA, GCIH, CISSP, CEH, or equivalent).
• Understanding of networking protocols, operating systems, and advanced security concepts.
• Experience with cloud security (AWS, Azure, Google Cloud).
• Familiarity with penetration testing and ethical hacking techniques.
• Excellent communication, leadership, and documentation abilities.
• Rotational shifts may be required to support 24/7 security monitoring.
• Ability to work in a fast-paced and high-pressure environment.