Incidence Response -AVP
Core
Lead investigations and response activities for security incidents, ensuring timely analysis, containment, eradication, and recovery to minimize risk exposure.
Role type
Senior Incident Response Analyst (AVP level)
Builds
Incident response playbooks, procedures, and documentation
Domain
Cybersecurity / Incident Response
Required skills
Incident response lifecycle management, forensic and log analysis, SIEM and EDR platform usage, MITRE ATT&CK framework knowledge, NIST and SANS incident response frameworks, network and endpoint investigation, security controls and mitigation techniques, query languages (Splunk SPL, CrowdStrike Query Language), technical reporting
Preferred skills
GCIH, CySA+, GCFA certifications
Responsibilities
Operate within the Incident Response (IR) function, Lead investigations and response activities for security incidents, Lead low to high severity security incidents, Coordinate response actions across cybersecurity, infrastructure, application, and business teams, Conduct forensic and log analysis, Prepare incident reports and technical summaries, Contribute to the development and maintenance of incident response playbooks, Manage the operational activities and performance of assigned junior incident response personnel, Participate in the on-call rotation
Seniority
Senior, hands-on IC with team management
