Cyber Defence Engineer-Incident Response
Core
Detect, identify, and respond to cyber events and threats using attacker mindset and best practices across the security platform lifecycle.
Role type
Senior Incident Response Engineer
Builds
Cyber defence center detection and incident response capability
Domain
Cybersecurity / Incident Response
Required skills
EDR, NDR, SOAR, UEBA, SIEM, sandboxes, malware/forensic analysis, threat hunting, vulnerability scanning, MITRE ATT&CK, log review, attack simulation, Python/Go/Bash scripting, TCP/IP, Windows/UNIX/Linux, network protocols, cloud computing, SaaS, DLP, anti-malware, firewall, intrusion detection/prevention
Preferred skills
Security+, ECIH, GCIH, GCIA, GCTI, GCFA, CCNA, CCNP, CISSP
Responsibilities
Detect, identify, and respond to cyber events and threats; Continuous log review for assets and actions; Active contributor to SIEM and SOAR systems content development; Integration of threat intelligence sources with SIEM; Continuous attack simulation studies and defining new rules; Attending internal and external audits; Effective reporting of log review and incident management activities.
Seniority
Senior, hands-on IC