Digital Forensic and Incident Response Analyst

About the role

The Digital Forensic and Incident Response (DFIR) Analyst will join our Cyber Fusion Center Team and support our Incident Response function. This role involves responding to IT security incidents, guiding first-level responders, managing third-party remediation efforts, and providing insights into cyber events.

Responsibilities

• Responds to IT security incidents according to the IT security incident response policy.
• Guides first-level responders for handling information security incidents.
• Manages and drives third-party remediation efforts.
• Validates and maintains incident response plans and processes to address potential threats.
• Builds strong relationships with business and technology stakeholders.
• Represents the team and communicates with all levels of organization, including senior management and business stakeholders.
• Identifies and develops workflow automation to lower response time and eliminate lengthy procedures during incident investigation.
• Performs additional analysis of escalations from Incident Response Analysts and conducts case reviews.
• Develops specific expertise to discern patterns of complex threat actor behavior and communicate understanding of current and developing cyber threats.

Qualifications

• Minimum 3-5 years of experience in Incident Response or Cybersecurity (including education and bootcamps).
• Intimate knowledge of the Cyber Kill Chain, MITRE ATT&CK Framework, or other relevant network defense and intelligence frameworks.
• Advanced knowledge of security technologies such as SIEM, EDR Tools, Host and Network Security Tools, and Vulnerability Management tools.
• Excellent written and oral communication skills.
• Demonstrated ability to work independently and as part of global teams in a fast-paced global environment.

Preferred Qualifications

• IT Security Certifications (GCIH, CySA+).
• Familiarity with Agile methodology.
• Working knowledge of Software Development Lifecycle Practices.
• Experience with Python, networking, IDS/IPS.