Cybersecurity Senior Incident Responde

Job responsible

Incident Detection and Response

• Monitor and analyze security alerts and logs to promptly identify and respond to potential security incidents.

• Participate in the response and investigation of security breaches, working closely with cross-functional teams to contain and mitigate threats.

• Apply your knowledge of incident response methodologies to minimize impact and conduct post-incident analysis.

• Threat Analysis and Mitigation

• Utilize your experience to analyze network traffic, logs, and other data sources to detect and investigate threats.

• Collaborate with internal teams to assess incidents and recommend appropriate remediation actions.

• Leverage advanced threat detection tools and techniques to proactively identify emerging risks.

• Vulnerability Management

• Apply your expertise in vulnerability assessment and penetration testing to identify exploitation detection ways.

• Security Operations management

• Participate in the operation and continuous improvement of security information and event management (SIEM) systems.

• Develop and refine standard operating procedures (SOPs) for incident response and other critical processes.

• Threat Intelligence Integration

• Stay abreast of emerging threats, vulnerabilities, and tactics through continuous research and engagement with cybersecurity communities.

• Incorporate threat intelligence into your daily analysis and response activities to enhance proactive threat detection.

• Documentation and Reporting

• Create comprehensive incident reports, analysis summaries, and documentation.

• Maintain meticulous records of incidents, investigations, and mitigation efforts.

Professional certifications such as SANS FOR500 (or equivalent) are a plus.

• Proficiency in using EDR, SIEM and SOAR tools and other cybersecurity technologies.