Cybersecurity Incident Responder - (EL-FNP250819 008/01)

<ul>
<li>Lead the response to cybersecurity incidents, including malware infections, data breaches, and insider threats.</li>
<li>Perform real-time and retrospective analysis of security events to identify threats Coordinate with MSSP Security Operations Centre (SOC) teams for monitoring and alerting.</li>
<li>Develop and document incident response plans and playbooks.</li>
<li>Should be expertise on handling the incidents end to end.</li>
<li>Conduct proactive threat hunting to identify unknown threats.</li>
<li>Perform digital forensic analysis on compromised systems to determine root causes.</li>
<li>Use forensic tools to collect and analyse logs, memory dumps, and disk images.</li>
<li>Work with SIEM (Security Information and Event Management) tools to detect anomalous behaviour.</li>
<li>Analyse logs from firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint protection, and cloud security tools.</li>
<li>Improve detection capabilities by tuning security alerts and developing new rules.</li>
<li>Recommend and implement security controls to reduce exposure.</li>
<li>Provide technical leadership to junior incident responders and security analysts</li>
</ul><h2>Requirements</h2><ul>
<li>Strong expertise in incident response, threat hunting, and forensic analysis.</li>
<li>Experience with SIEM tools (e.g., Elastic, Splunk).</li>
<li>Proficiency in network security, malware analysis, and log analysis.</li>
<li>Familiarity with cloud security (AWS, Azure, GCP) and container security.</li>
<li>Experience with cloud security tools and AI-powered security analytics (AWS Guard Duty, Azure Sentinel, Google Chronicle).</li>
<li>Familiarity with AI/ML-driven anomaly detection and behavioural analysis techniques.</li>
<li>Knowledge of security solutions ( EDR,XDR,NDR,WAF,Proxy,Firewall,Email Security).</li>
<li>Scripting and automation skills (Python, PowerShell, Bash).</li>
<li>Deep understanding of MITRE ATT&amp;CK framework, cyber kill chain, and machine learning models for cybersecurity applications.</li>
<li>Excellent communication and report-writing skills and ability to work under pressure scenarios</li>
</ul>