Senior CERT Analyst (experienced level professional)

About the role

Step into a role where every day brings a new challenge and a chance to make a real impact. As a Senior CERT Analyst, you are at the heart of the organization’s cyber defense—proactively tracking emerging threats, analyzing incidents, and mitigating risks.

Responsibilities

• Prevent: Know the latest evolving threats and security technologies; assess and contextualize risk; share findings with technical partners and the global CERT network.
• Detect: Triage alerts, ascertain severity, and provide mentorship during high-severity events; participate in shared on-call coverage (including weekends/holidays).
• Lead business-as-usual and complex incidents, including intrusions, malware, and ransomware, from start to end. Coordinate containment, eradication, and recovery across global teams.
• Maintain clear communication with collaborators while protecting privacy and confidentiality.

Requirements

• Exceptionally, be available 24/7 to participate in emergency actions for critical severity events if needed.

Qualifications

• A solid record of accomplishment for security incident response including leading cyber crisis response, providing security expertise, leading and prioritizing multiple incident workstreams.
• Capable of defining new procedures and applying best in class security practices, Strong knowledge of the cyber kill chain and MITRE ATT&CK for investigation and reporting, Hands-on expertise with network forensics and malware identification / eradication, Ability to analyze data from cyber defense tools (e.g., SIEM/EDR, network traffic, IDS/IPS, firewall and system logs, OSINT) to identify threats, resolve impact, and recommend mitigations.
• Demonstrated ability to make key decisions to navigate cyber or security events and take a course of action based on the assessment of the current scenario or situation. Ability to perform quick identification of impacts to the enterprise from various data sources and recommend appropriate countermeasures and mitigations.
• Solid understanding of Windows/Linux environments (2-3 years Administration/DEVOps), networking concepts/protocols, architecture, and system/application hardening.
• Clear written and verbal English communication, including executive-ready updates; strong documentation habits, Good interpersonal skills and collaboration abilities with strong team-orientation, Ability to mentor junior analysts; comfortable working across time zones, Solid understanding of Windows/Linux environments (2-3 years Administration/DEVOps), networking concepts/protocols, architecture, and system/application hardening, Knowledge or usage of tools such as Splunk, Python, PowerShell, DB query language / tools or others used in offensive and defensive security is a plus.

Skills

• Ability to learn and apply new technologies quickly.

Benefits

• Travel within North America and Global may be required, but infrequent.

Pay

Competitive compensation package.

Schedule

Lead all aspects of global security incidents from 10 am – 7 pm EST/EDT, Weekdays. Weekend and holiday coverage is shared globally by CERT teams (weekend coverage provided by one analyst per zone for a weekend).