Cyber Incident Handler - Associate

Tasks

• Analyze causes of security violations
• Analyze network events
• Contribute to security operations improvement
• Coordinate incident response with team
• Evaluate security alerts
• Formulate response strategies
• Identify security risks
• Investigate security events
• Maintain incident documentation
• Mitigate threats
• Perform initial event triage
• Recommend procedures to prevent future incidents
• Resolve security events
• Synthesize alert data into reports

Perks/Benefits

• N/A

Skills/Tech-stack

24/7 Operations | Alert triage | Artifact analysis | Chain of Custody | Data Analysis | Digital forensics | DoD incident response | Elastic Stack | Event Correlation | Event triage | Exploit analysis | IDS | IOC management | Incident Response | Incident documentation | Incident timeline reconstruction | MISP | Multi-source data | Multi-source data analysis | NIST SP | NIST SP 800 | NIST SP 800-61 | Network Security | Network security monitoring | Playbook Development | Policy Compliance | SIEM | SIEM Alert Triage | SOC Operations | Security Policy | Security controls | Security monitoring | Security policy compliance | ServiceNow | Source data analysis | Splunk | TTP analysis | Threat Intelligence | Timeline reconstruction