Cyber Defense Analyst

Tasks

• Analyze root cause
• Collect forensic evidence
• Integrate AI automation into workflows
• Investigate security incidents
• Maintain IR runbooks and playbooks
• Map detections to MITRE ATTACK
• Monitor security alerts
• Participate in incident response tabletop exercises
• Perform incident response
• Perform threat hunting
• Track incident response operational metrics
• Translate threat intelligence into detections
• Triage security alerts
• Tune detection rules
• Update and maintain detection rules
• Use AI for alert triage and enrichment

Perks/Benefits

• N/A

Skills/Tech-stack

AI Automation | Audit Logging | CSPM | Case management | Chain of Custody | Cloud Audit Logging | Cloud audit | Detection engineering | EDR | Evidence handling | Flow analysis | Forensic Evidence | Forensic evidence handling | Identity Provider | Identity Provider Logs | Incident Response | LLM | Mitre Attack | Network flow | Network flow analysis | Powershell | Prompt engineering | Python | SIEM | Threat Intelligence | Ticketing