Cybersecurity Investigator
Core
Investigate, contain, and respond to cybersecurity threats across enterprise, cloud, identity, email, endpoint, network, and operational technology environments.
Role type
Senior Security Operations Center (SOC) Investigator
Builds
Incident response playbooks, detection use cases, and threat hunting workflows
Domain
Cybersecurity / Security Operations
Required skills
SIEM analysis, endpoint detection and response, incident response, threat hunting, MITRE ATT&CK framework, digital forensics, malware analysis, cloud security investigation, network security analysis, identity security analysis
Preferred skills
GCIH, GCIA, GCFA, CySA+, SC-200, CISSP certifications, SIEAM, XDR, SASE platforms, digital forensics, memory analysis, malware analysis, security automation
Technologies
SIEM, EDR, Microsoft Entra ID, Microsoft 365, Azure, MITRE ATT&CK
Responsibilities
Monitor and investigate security events and alerts, perform advanced triage of suspicious activity, coordinate incident response activities, conduct proactive threat hunting, develop detection use cases and playbooks, document investigative findings and evidence
Seniority
Senior, hands-on IC