Incident Response Analyst

• Client is seeking an Incident Response Analyst to join the Enterprise Incident Response team. The successful candidate will identify and respond to information security incidents and proactively hunt for potential threats and intrusions to Client systems.

• Respond to security incidents while following the incident response cycle.
• Investigate user reported and system generated alerts to identify potential security incidents.
• Follow through with the tracking, execution, and reporting of the Lessons Learned and Post Incident Activities portion of the incident response cycle.
• Assist in the tuning and improvement of incident response tools and processes.
• Collaborate with and support other members of the larger Threat Management and Enterprise Information Security teams.

• Bachelor's degree in Information Systems, Cyber Security, or related sciences preferred.
• 1+ years of information security experience or the equivalent combination of education, technical training, or work/military experience. Information Security certifications a plus.
• Must have an understanding of Operating Systems, Networking, Information Systems and Technology, Cloud, and Virtualization Concepts as well as strong knowledge of common security tools including SIEM, EDR, IPS, and Forensic Tools.
• Must have a thorough understanding of Incident Response Processes and Procedures.
• Must be familiar with various threat actor methodologies, tactics, techniques, and procedures.
• Must be able to multi-task and work independently, or with a team, on moderate to complex assignments using independent professional discretion and judgment as well as transition quickly between projects.
• Demonstrated ability to communicate complex subjects regarding strategic and tactical processes of incident response to stakeholders of varying technical levels.

ApTask