Security Analyst - Incident Response (all genders)
Core
Build and maintain DFIR tools and security infrastructure, act as first responders to security incidents, perform digital forensics, and implement risk minimization measures.
Role type
Senior Incident Response Security Analyst
Builds
Security operations infrastructure, automated monitoring systems, and incident response playbooks
Domain
Cybersecurity / Incident Response / Digital Forensics
Required skills
Digital forensics, SIEM operations and optimization, Python scripting for automation, Linux command line proficiency, Cloud environment management (AWS/Azure/GCP), Threat hunting, Incident response playbooks creation, WAF configuration
Preferred skills
SANS/GIAC certifications, OSIR training, HackTheBox/TryHackMe experience, Laravel/PHP knowledge, GitLab CI/CD, Terraform/Terragrunt
Technologies
Python, SIEM, AWS, Azure, GCP, Linux, Cloudflare WAF, GitLab CI/CD, Terraform, Terragrunt
Responsibilities
Build and maintain DFIR tools and security infrastructure, perform digital forensics during security incidents, operate and optimize SIEM systems for threat detection, develop monitoring and scanning systems using Python, integrate AI-driven solutions into security operations, analyze and resolve security alerts across internal and cloud environments, create and update incident response playbooks
Seniority
Mid-level (2-4 years experience)
