Cyber incident Responder

Job Title: Cyber Incident Responder

Overview: We are seeking a skilled Cyber Incident Responder to join our team and play a crucial role in managing and mitigating cybersecurity incidents. This position involves addressing security breaches, minimizing impact, preventing future incidents, and assisting in the investigation and resolution of security issues.

Key Responsibilities:

• Incident Management:
• Lead and manage the incident response lifecycle, including preparation, identification, containment, eradication, recovery, and post-incident analysis.
• Utilize incident response frameworks and methodologies such as NIST, SANS, and MITRE ATT&CK to guide response efforts.
• Forensics and Threat Detection:
• Apply basic digital forensics principles and techniques, using tools such as FTK, EnCase, Volatility, and Autopsy.
• Implement threat detection techniques including signature-based, anomaly-based, and heuristic detection.
• Utilize SIEM tools like Splunk and LogRhythm for monitoring and analysis.
• Network and Endpoint Security:
• Conduct network traffic analysis with tools such as Wireshark and tcpdump.
• Understand and address malware types and behaviors; apply endpoint security best practices and mitigation strategies using EDR solutions like CrowdStrike.
• Cloud Security:
• Demonstrate experience with AWS cloud environments and security tools, including AWS Security Hub and Amazon GuardDuty.
• Manage cloud security controls and ensure the secure operation of AWS environments.
• Support infrastructure-as-code (IaC) and container-based deployment models, including automated CI pipeline management.

Experience and Technical Skills:

• Professional Experience:
• At least 5 years of experience in IT security, focusing on cloud security and architecture.
• Proficiency with AWS Cloud Platform, security technologies (e.g., firewalls, VPNs, IDS/IPS, WAFs), and endpoint security solutions.
• Compliance and Standards:
• Familiarity with industry standards and regulations such as NIST, HIPAA, and SOC 2.
• Experience conducting security assessments and audits to ensure compliance.
• Technical Proficiency:
• Hands-on experience with forensic tools, SIEM systems, network and endpoint security, and cloud security practices.
• Expertise in managing and responding to security incidents, including those involving cloud environments.

Non-Technical Skills:

• Communication:
• Excellent verbal and written communication skills, with the ability to explain complex security issues to non-technical stakeholders.
• Problem-Solving:
• Strong analytical skills to effectively address and mitigate security incidents.
• Collaboration:
• Proven ability to work effectively with cross-functional teams to manage and resolve security incidents.

Qualifications:

• Education: Bachelor s degree in Cybersecurity, Computer Science, Information Technology, or a related field.

Experience: Minimum of 3 years in cybersecurity or incident response roles, with hands-on experience managing security incidents and breaches

Mail id:

Contact:

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.