Full-Time Cyber Incident Response Lead

• Conduct advanced incident response activities to investigate and contain complex cybersecurity matters.
• Orchestrate workstreams across teams and explain the CFC's understanding of the timeline of attacker activity.
• Respond to cybersecurity events and alerts associated with threats, intrusions, or compromises.
• Manage multiple cases related to security incidents throughout the incident response lifecycle.
• Coordinate successful conclusion of security incidents according to Process & Procedures.
• Maintain case documentation, including notes, analysis findings, containment steps, and cause for each assigned security incident.
• Maintain assigned caseload and move incidents through each phase of the IR Lifecycle.
• Maintain an understanding of Operating Systems, Security Technologies, Cloud Security investigations and Networking.
• Interpret device and application logs to identify the root cause.
• Support overall direction for the CFC and input to the security strategy.
• Mentor and provide advanced support to analysts.

• 8+ years of experience working within cybersecurity or information technology roles.
• 4+ years working as an investigator, analyst, or leader in a Cyber Incident Response Team.
• Bachelor's Degree in Computer Science, Computer Engineering, Information Systems, Information Security, or a related field.
• Knowledge of network protocols, wireless networking, networking infrastructure, and network topologies.
• Experience with commercial and open-source SIEMs, full packet capture tools, and network analysis tools.
• Exhibit skills using common Incident Response and Security Monitoring applications.
• Preference for candidates to have at least one certification involving incident response, ethical hacking, cyber security, or network forensics.
• Hold one Security Management certification or obtain such certification within the first two years.

What is the last date for applying to the job?

Which countries are accepted for this remote job?