Full-Time Sr Cyber Incident Responder

• Day-to-day operational tasks related to the ongoing support of Threat Operations.
• Forensically analyzing escalated security incidents from the SOC and conducting response actions following NIST and SANS Incident Response Frameworks.
• Overseeing ticket queue triage: prioritization, and escalations.
• Analyzing threat data from multiple sources and identifying security incidents and events of importance for direct escalation to Incident Commander(s).
• Providing root cause analysis for intrusions on Windows, Mac, and Linux hosts
• Mitigating risk and determine impact for security incidents across multiple technology platforms (Cloud, Hosts, Networks, Applications, Email)
• Keeping detailed notes on all analysis activity, documented in the case management tool to validate process adherence.
• Contributing to the strategic creation and updating of new and existing SOAR playbooks and runbooks and response process documentation.
• Providing On-Call support for escalated events for 1 week on a 5-week rotation
• Functioning as Incident Handler for declared severity incidents to drive containment and remediation action items
• Involvement with Cyber initiatives and projects that influence incident response capabilities

• Minimum 5 years working in Cyber Defense with experience in Incident Response, Security Operations Center (SOC), detection engineering, or similar functions.
• Experience using industry-standard security toolsets in a layered defense model
• Working knowledge of core Enterprise IT concepts (web application architectures, networking, etc.)
• Knowledge of the cyber threat landscape to include different types of adversaries, campaigns, and the motivations that drive them
• Exceptional written and verbal communication skills

What is the last date for applying to the job?

Which countries are accepted for this remote job?