Security Consultant - Incident Responder

Good Communication SkillsGood grasp of basic security principles like confidentiality, authentication, access control and privacy, security vulnerabilities, physical security issues, protocol design flaws, malicious code, implementation flaws, configuration weaknesses, user errors, user indifference.Work well under pressure handling multiple tasks.Having 6+ Years of experience in Incident response and Threat intelligenceMonitor security alerts and notifications from various sources, including security information and event management (SIEM) systems, intrusion detection systems (IDS), and endpoint protection solutions.Perform real-time analysis of security alerts and determine the severity and impact of potential security incidents.Lead and coordinate the response to security incidents, including identification, containment, eradication, and recovery.Conduct root cause analysis to determine the origin and impact of incidents and develop recommendations to prevent future occurrences.Document and report incidents, including the creation of detailed incident reports and timelines.Having good knowledge in Investigation Technologies such as EDR, XDR, Email Security, VA, Sandboxing, Threat Intelligence, Deception, DFIR and SOAR.Experience with SIEM, IDS/IPS, endpoint protection, and forensic tools.Participate in the continuous improvement of incident response playbooks and standard operating procedures (SOPs).Perform digital forensics investigations on compromised systems to collect and analyze evidence.Stay updated on the latest cyber threats, vulnerabilities, and attack vectors.Analyze and interpret threat intelligence to identify potential risks and improve incident detection and response capabilities.Collaborate with threat intelligence teams and external partners to share information and enhance situational awareness. Required education Bachelor's Degree Preferred education Master's Degree Required technical and professional expertise Incident Responder to assist our 24/7 Incident Management Team.Required Professional and Technical Expertise:SIEM ToolsQradar, Securonix, ArcSight, Splunk, Sentinel One (any of one).Security ToolsSmokescreen, TIP, Wireshark, EDR, XDR, Antivirus, Virus Total.Language (Optional)Python, PowerShell, Shell Scripting, JS, VB Preferred technical and professional experience CertificationCEH, CompTIA Security+, AZ-200, AZ-900, SIEM Fundamentals, CERT-Certified Computer Security Incident Handler (CERT-CSIH)