10+ years of experience in cybersecurity, with 2-5 years in T3 incident response focusing on system analysis.
Proficient in conducting security reviews and vulnerability risk assessments using both manual and automated methods.
Familiarity with enterprise security solutions and incident crisis management protocols.
Skilled in developing attack simulations for the training of security teams.
Experience in creating documented procedures and security plans for team implementation.
Willingness to participate in an on-call rotation, including one weekend each month.
Domestic and international travel may be necessary, and the candidate must be eligible to work in the U.S. without sponsorship.
Responsibilities
Oversee daily management of customer incidents, ensuring timely and efficient responses.
Conduct incident response and forensic analysis on compromised systems, providing remediation recommendations.
Lead incident response efforts, prioritize actions, and generate clear incident reports detailing attack vectors and methodologies.
Manage complex global incidents with a structured approach.
Perform large-scale assessments of compromises within customer environments.
Develop and maintain incident response plans and training playbooks.
Create realistic attack scenarios for customer tabletop exercises, enhancing preparedness.
Benefits
Opportunity to work with a highly experienced and skilled team in a dynamic environment.
Access to advanced tools and technologies for incident response and analysis.
Professional growth through exposure to a wide range of cybersecurity challenges.
Flexible work arrangements may be available to accommodate travel requirements.
Participation in ongoing training and development programs to enhance skills and knowledge.
Full Job Description
Job Description
Responsible for daily incident management of customer incidents
Perform incident response and forensic analysis of compromised systems, identify and provide recommendations for remediation
Formulate and direct incident response efforts, prioritize those response efforts, and create legible incident reports that describe the compromise vector, attacker methodologies and artifacts
Ability to manage complicated global incidents
Ability to perform large-scale compromise assessments for customer environments
Build incident response plans and playbooks
Create attack scenarios for customer tabletop training exercises
Creation of detailed incident reports for customers and effective communication of findings to customers
Build and maintain sandbox/test lab environments to evaluate malicious code
Work within a team environment and will be responsible for coordinating work actions
Qualifications
This is not an entry level SOC role.
10+ years of cybersecurity experience out of which 2-5 years are experience performing T3 incident response with an emphasis on system compromise analysis.
Experience of performing security reviews/vulnerability risk assessments of network environments using both manual procedures and automated analysis tools.
Experience with enterprise security solutions, incident crisis management.
Experience with performing attack simulation for training security teams.
Experience with creating procedures and documented plans for security teams.
Ability to participate in on-call rotation, including at least one weekend a month.
Domestic and International travel may be required.
Must be eligible to work in the US without sponsorship from an employer now or in the future.
