Cybersecurity Engineer (Incident Response)
Core
Lead incident response activities including triage, investigation, containment, eradication, and recovery for cybersecurity incidents.
Role type
Senior Incident Response Engineer
Builds
Secure delivery of applications and infrastructure services
Domain
Cybersecurity / Incident Response
Deliverable
client delivery
Required skills
log analysis, digital forensics, root cause analysis, malware analysis, network traffic analysis, EDR telemetry analysis, SOAR playbook implementation, incident response playbook development
Preferred skills
static and dynamic malware analysis, cloud security, container security
Technologies
AXIOM, FTK, Autopsy, Windows, Linux, EDR, SOAR
Responsibilities
Conduct triage and investigation of potential cybersecurity incidents; Develop and execute containment strategies; Perform investigations and root cause analysis; Conduct comprehensive security event log analysis; Conduct digital forensic acquisition and analysis of artifacts; Provide expert input for automating Security Operations; Develop and test incident response playbooks and processes; Maintain situational awareness of cyber security landscape and emerging threat actor TTPs
Seniority
Senior, hands-on IC