Senior Incident Response Analyst

Role overview

Responsibilities

• Manage customer incidents and conduct forensic analysis of compromised systems, identifying remediation recommendations.
• Direct and prioritize incident response, handle complex global incidents, and conduct large-scale customer compromise assessments.
• Prepare reports describing compromise vectors, attacker methods, artifacts, and findings for customers.
• Build response plans and playbooks, and create attack scenarios for customer tabletop exercises.
• Build and maintain sandbox and test lab environments for malicious-code evaluation.
• Coordinate work within a team.

Qualifications

• This is not an entry-level SOC role.
• Requires 10+ years of cybersecurity experience, including 2–5 years of T3 incident response focused on system compromise analysis.
• Requires experience with network security reviews and vulnerability risk assessments using manual and automated methods.
• Requires experience with enterprise security solutions, incident crisis management, attack simulation for training, and documented security procedures and plans.
• Must participate in an on-call rotation, including at least one weekend each month.
• Must be eligible to work in the United States without employer sponsorship now or in the future.

Travel

• Domestic and international travel may be required.