Incident Response Analyst
Core
Respond to and investigate security incidents across the company, coordinate response with relevant teams, and ensure timely resolution.
Role type
Incident Response Analyst
Builds
Security incident response playbooks and optimized alert verification processes
Domain
Cybersecurity / Incident Response
Required skills
IoC analysis, Splunk/Clickhouse/SQL query writing, SOAR/IRP usage, Python/PowerShell/Bash scripting, Linux/Windows OS administration, MITRE ATT&CK framework knowledge, Cyber Kill Chain understanding, log analysis and triage
Preferred skills
NIST/ISO security best practices, Docker/Kubernetes monitoring, SIEM correlation rules, NTA tools, Kafka/ELK/Graylog, CI/CD/Infrastructure-as-Code, endpoint security tools (Audit.d, Sysmon), malware analysis, penetration testing
Technologies
Splunk, Clickhouse, SQL, VirusTotal, AnyRun, SOAR, IRP, Python, PowerShell, Bash, Linux, Windows, MITRE ATT&CK, Cyber Kill Chain, Docker, Kubernetes, Kafka, ELK, Graylog, Terraform, Ansible, Audit.d, Sysmon, AppArmor, SELinux
