Cyber Incident Response Analyst

Job Summary

To enhance security operations, the full-time Cyber Incident Response Analyst will triage and investigate security alerts, respond to incidents across cloud and endpoint environments, and develop automation workflows to improve detection and response capabilities.

Key Responsibilities:

• Triage, investigate, and resolve security alerts from various sources, ensuring accurate severity classification and timely response
• Perform hands-on incident response activities, including containment, evidence collection, and documentation
• Build and optimize SOAR playbooks and automation workflows to streamline alert handling and response actions

Required Qualifications:

• 3+ years of experience in security operations, incident response, or similar hands-on cybersecurity roles
• Hands-on experience in a SOC or incident response role with knowledge of the incident response lifecycle
• Experience with EDR platforms and SIEM for log analysis and investigation
• Practical experience building or maintaining SOAR playbooks and security automation workflows
• Solid understanding of common attack techniques and familiarity with cloud environments and SaaS/identity log sources