Principal Cybersecurity Specialist
Core
Lead cyber defense operations by investigating, analyzing, and mitigating security incidents to protect organizational assets and data.
Role type
Principal Cyber Defense Specialist (Incident Response)
Builds
Security incident response capabilities, threat intelligence reports, and detection rules for a global healthcare enterprise.
Domain
Healthcare / Cybersecurity
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
Incident response lifecycle management, threat analysis, log analysis, forensic techniques, playbook development, risk assessment, threat modeling, stakeholder briefing, cloud security awareness, malware analysis basics, social engineering countermeasures
Preferred skills
MITRE ATT&CK framework, Diamond Model, Cyber Kill Chain, reverse engineering, static/dynamic malware analysis, cloud environment security (AWS/Azure/GCP)
Technologies
SIEM, intrusion detection systems, EDR tools, firewalls, AWS, Azure, GCP
Responsibilities
Monitor security alerts and identify potential incidents in real time; investigate complex information security incidents to determine root cause; develop and review security incident response processes and playbooks; create reports and dashboards for stakeholders; participate in tabletop exercises and post-incident reviews; collaborate with vulnerability management and threat intelligence teams; conduct threat hunting and analyze collected data for trends.
Seniority
Senior, hands-on IC with strategic oversight