Cyber Security Incident Response Team (CSIRT) Officer
Core
Investigate and respond to Level 3/4 security incidents (malware, intrusions, breaches) across IT, IoT, and OT environments; conduct forensic analysis and threat hunting; engineer and automate SIEM systems.
Role type
Senior Cyber Security Incident Response Team (CSIRT) Officer
Builds
Incident response playbooks, automated detection rules, and forensic analysis reports for enterprise infrastructure
Domain
Cybersecurity / Incident Response / Threat Intelligence
Required skills
Incident response, forensic analysis, threat hunting, SIEM engineering, log analysis, malware analysis, automation scripting, MITRE ATT&CK framework, cross-functional collaboration
Preferred skills
Tabletop exercise facilitation, knowledge sharing, pragmatic risk assessment
Technologies
Microsoft Sentinel, EDR solutions, Microsoft Defender, IDS/IPS, firewalls, ServiceNow SIR module, Windows/Linux logs
Responsibilities
Investigate and respond to Level 3/4 security incidents; conduct forensic investigations and threat hunting; develop and refine incident response plans; automate alert handling and response workflows; organize cybersecurity tabletop exercises
Seniority
Senior, hands-on IC
