Incident Response Analyst

The Incident Response Analyst in the computer security incident response team is responsible for developing and executing standards, procedures, and processes to uncover, resist, and recover from security incidents. This position is ideal for an early career analyst looking to learn and grow in the cybersecurity field. Technical acumen, passion, and determination will be key attributes highlighted during the interview process. Key Responsibilities The Incident Response Analyst fulfills the following tasks: - Responds to computer security incidents following the incident response policy and procedures. - Provides technical guidance to first responders for handling cybersecurity incidents. - Offers timely updates to relevant stakeholders and decision-makers. - Communicates investigation findings to business units to enhance the cybersecurity posture. - Validates and maintains incident response plans and processes to address potential threats. - Analyzes data for management reporting and metrics. - Assesses the impact of new threats and communicates risks to detection engineering functions. - Conducts root-cause analysis, documents findings, and participates in root-cause elimination activities as required. - Triage incidents, assess risk, perform real-time analysis, and manage workload during investigations. - Creates runbooks for frequently occurring incidents to automate or assist with the resolution. Preferred Qualifications A successful Incident Response Analyst candidate will possess the following qualifications: - Bachelor's Degree in Business, Technology, Computer Science, or related field preferred, or equivalent experience such as BE/BTech, BS, or MA in computer science, information security, or related field. - Minimum of 5 years of experience in incident response. - Familiarity with incident response frameworks and methodologies like NIST 800-61 and MITRE ATT&CK. - Experience with incident response tools and technologies, including SIEM, forensics, and threat intelligence tools is beneficial. - Experience with reporting and communicating incident details, improving incident response processes, and recovering from security incidents is advantageous. Minimum Qualifications Knowledge and Skills Candidates will be evaluated based on their ability to perform duties while demonstrating the necessary skills and competencies to excel in the role, including: - Effective communication of complex technical issues in an easily understood, authoritative, and actionable manner. - Understanding of organizational mission, values, goals, and consistent application of this knowledge. - Strong decision-making capabilities and the ability to influence others. - Team-focused mentality and ability to work effectively with diverse stakeholders. - Strong problem-solving and troubleshooting skills. All applicants must complete pre-employment onboarding requirements, including background checks, drug screens, and motor vehicle records searches, as required by law. Certifications Contact Compensation Work Environment/Physical Demands Typical office environment Competencies ITS: Information Technology Service Job Grade 004 By valuing diverse voices and perspectives, we cultivate an authentically inclusive environment for professionals and provide innovative solutions for clients.,