Cybersecurity Incident Response Specialist

Job Role Description

Handling, analyzing, and responding to cybersecurity incidents.

Responsibilities

• Perform incident response activities, including forensic evidence collection, intrusion correlation, tracking, threat analysis, and system remediation.
• Analyze logs from multiple sources to identify potential network security threats.
• Assess incident priorities to determine vulnerabilities, scope, urgency, and potential impact, and provide recommendations for rapid remediation.
• Correlate incident data to identify vulnerabilities.
• Analyze cybersecurity defense trends and prepare reports.
• Conduct initial forensic image acquisition in line with relevant investigation standards and analyze them to determine appropriate remediation actions.
• Analyze network alerts from various sources to identify root causes of incidents.
• Track and document incidents.
• Develop and publish cybersecurity defense guidelines and procedures.
• Collect intrusion artifacts and leverage them to reduce future incidents.
• Prepare “lessons learned” reports.
• Monitor external threat intelligence sources.
• Coordinate incident response efforts.
• Support legal teams when required.
• Collaborate with threat analysts.
• Identify information sources for investigations.

Years of Experience

4 – 6 years

Education

Bachelor’s degree in Computer Science or equivalent

Certifications

GCIH + Security+