Incident Response Analyst

Responsible for leading major cyber incident response, digital investigation, containment, eradication, recovery, and coordination of specialized response activities.

Key Responsibilities:

• Lead investigation and response for critical and high-severity cybersecurity incidents.
• Coordinate containment, eradication, recovery, evidence preservation, and post-incident activities.
• Perform advanced incident analysis across endpoint, network, server, application, and cloud environments.
• Lead malware, IOC, forensic, and attack-path investigations and support threat hunting.
• Develop and maintain incident response plans, procedures, playbooks, and escalation mechanisms.
• Coordinate with SOC, infrastructure, application, cloud, legal/compliance, and customer stakeholders during major incidents.
• Conduct root-cause analysis and prepare detailed incident reports and remediation recommendations.
• Support red-team findings, security assessments, and improvement of detection and response capabilities

Required Certifications: GCIH / GREM / OSCP or equivalent

Required Skills:

• Strong incident response and cyber investigation experience.
• Knowledge of digital forensics, malware analysis, threat hunting, network/endpoint investigation, and evidence handling.
• Understanding of attacker tactics and techniues, MITRE ATT&CK, SIEM, EDR/XDR, and security controls.
• Experience in managing major incidents and coordinating multidisciplinary response teams.