Incident Response Analyst

<ul>
<li>Monitoring, evaluating, and managing cybersecurity incidents.</li>
<li>Performing initial triage and determining alert severity.</li>
<li>Investigating incidents through SIEM, EDR, and other telemetry sources.</li>
<li>Containment, eradication, and remediation of confirmed threats.</li>
<li>Collecting and preserving digital evidence with appropriate chain of custody.</li>
<li>Analyzing logs, endpoints, network traffic, and suspicious files.</li>
<li>Performing root-cause analysis and determining the scope of each incident.</li>
<li>Conducting threat hunting based on techniques and indicators of compromise.</li>
<li>Writing incident reports and proposing corrective actions.</li>
<li>Participating in tabletop exercises and improving incident response playbooks.</li>
</ul><h2>Requirements</h2><ul>
<li>At least 2 years of experience in SOC, Incident Response, or Digital Forensics.</li>
<li>Experience using SIEM platforms such as Microsoft Sentinel, Splunk, or QRadar.</li>
<li>Familiarity with EDR/XDR solutions such as Microsoft Defender or CrowdStrike.</li>
<li>Good knowledge of Windows, Linux, and basic cloud environments.</li>
<li>Ability to analyze system, network, and application logs.</li>
<li>Good understanding of the Incident Response phases and MITRE ATT&amp;CK.</li>
<li>Basic knowledge of digital forensics and malware analysis.</li>
<li>Experience in threat hunting and management of Indicators of Compromise.</li>
<li>Knowledge of scripting with Python, PowerShell, or KQL will be considered an additional asset.</li>
<li>GCIH, GCFA, SC-200, BTL1, or an equivalent certification will be considered an additional asset.</li>
</ul>