Incident Response Analyst
Core
Investigate, analyze, and respond to cyber security incidents across enterprise environments to defend against evolving threats.
Role type
Cyber Security Incident Response Analyst
Builds
Incident response capabilities and cyber resilience for a large enterprise
Domain
Cyber Security / Incident Response
Deliverable
client delivery
Required skills
SIEM, EDR/XDR, digital forensics, threat hunting, incident response methodologies, networking, cloud security, identity management, scripting (PowerShell, Python, KQL)
Preferred skills
Microsoft security technologies, MITRE ATT&CK, NIST frameworks
Technologies
SIEM, EDR/XDR, cloud platforms, network security tools, forensic tooling
Responsibilities
Investigate and respond to cyber security incidents; Monitor and triage alerts from security tools; Analyse malicious activity including phishing and ransomware; Coordinate incident containment, remediation, and recovery; Carry out digital forensic investigations; Perform proactive threat hunting; Enhance detection capabilities through alert tuning and playbook improvement; Produce incident reports and post-incident recommendations.