• Lead and participate in incident response activities, including detection, analysis, containment, eradication, and recovery.
• Contribute to the development and improvement of incident response plans, procedures, and capabilities.
• Conduct thorough investigations of security incidents, including malware infections, phishing attacks, data breaches, and denial-of-service attacks.
• Analyze security events and alerts to identify potential incidents.
• Triage and prioritize incidents based on severity and impact.
• Contain and eradicate security threats to minimize damage and disruption.
• Collect and preserve evidence for forensic analysis.
• Recover affected systems and data.
• Document incident response activities and findings.
• Stay abreast of current cyber threats and vulnerabilities.
• Analyze threat intelligence to identify potential risks to the organization.
• Proactively identify and mitigate security vulnerabilities.
• Contribute to the development and delivery of security awareness training programs.
• Promote a security-conscious culture within the organization.
• Contribute to the development and maintenance of incident response plans and procedures.
• Participate in incident response exercises and simulations.
• Identify and recommend improvements to incident response capabilities.

Education:

• Bachelor’s degree in information technology, Cybersecurity, Computer Science, or related field.
• CompTIA Security+. GIAC Certified Incident Handler (GCIH) or equivalent. GIAC Certified Forensic Analyst (GCFA) or equivalent.

​

Experience:

• 9+ years of experience in incident response or a related cybersecurity role.
• Strong understanding of incident response methodologies (e.g., NIST, SANS).
• Experience with security technologies, such as firewalls, intrusion detection/prevention systems, endpoint security solutions, and SIEM tools.
• Knowledge of malware analysis, network forensics, and data recovery techniques.
• Excellent analytical and problem-solving skills.

NA