Lead Information Security Analyst -Security Operations/Incident Management
Core
Lead technical investigation and incident response for security alerts in a Cloud Native - DevOps environment.
Role type
Senior IC Information Security Analyst (Incident Management)
Builds
Detection and response capabilities for cloud-native platforms
Domain
Cybersecurity, Cloud Native, DevOps
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Alert triage, root cause analysis, incident response process creation, security advisory, threat intelligence analysis, log analysis, networking basics, SOC frameworks (MITRE ATT&CK, NIST, cyber kill chain), EDR/Email security/IPS/IDS/Firewall/SIEM operations
Preferred skills
Cloud security technologies, AI technology security implementation
Technologies
McAfee EDR, FireEye, CrowdStrike EDR, Cortex XDR, Microsoft XDR, SIEM, EDR, Email security, IPS/IDS, Firewall
Responsibilities
Investigate EDR, Entra, Email, and SIEM alerts to identify threats and anomalies; perform detailed technical investigation on security incidents and root cause analysis; create Incident Response process/runbooks/SOPs; provide security advisory and support deployment/integration of security platforms; collaborate with Corporate IT to strengthen security posture; utilize open-source threat intelligence to evaluate and deploy detection/remediation procedures; coordinate with stakeholders to ensure adequate security controls; provide management with deep insight into threats and lead team members to resolve complex security problems
Seniority
Senior, hands-on IC