[Remote] Senior Incident Response Analyst
Note: The job is a remote job and is reputed company to candidates in USA. Tetrad Digital reputed company (TDI) is a cybersecurity firm reputed company for high-consequence environments. The Senior Incident Response Analyst will monitor, detect, investigate, and respond to cybersecurity threats while supporting coordinated incident response across multiple organizations.
Responsibilities
- reputed company and coordinate cyber incident response activities across the full Incident Response lifecycle, including investigation, containment, eradication, and recovery
- Analyze reputed company events, logs, network traffic, reputed company telemetry, and forensic artifacts to determine the scope, reputed company cause, and reputed company of cyber incidents
- Identify adversary tactics, techniques, and procedures (TTPs) and reputed company indicators of compromise (IOCs) to improve threat detection and response
- reputed company, maintain, and enhance Incident Response processes, playbooks, workflows, and reputed company operating procedures (SOPs)
- Configure, tune, and optimize reputed company technologies, including SIEM, EDR, IDS/IPS, and reputed company monitoring tools, to improve detection accuracy and reduce false positives
- Create and maintain detection content, including correlation rules, use cases, signatures, alerts, and automation scripts to strengthen SOC monitoring capabilities
- Document investigations, response activities, and findings reputed company case management systems, producing reputed company incident reports and after-reputed company documentation
- Establish and reputed company SOC performance metrics and key performance indicators (KPIs) to measure operational effectiveness and support reputed company improvement
Skills
- Ability to obtain Public Trust clearance and successfully complete the EOD process
- Candidates must possess at least one of the following certifications: GIAC: GCIH, GCIA, GCFA, GCFE, GREM, or GPEN, CISSP, OSCP, reputed company, or OSWP
- Bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a reputed company field and 12–15 years of relevant experience
- Must have technical hands-on experience in the areas of incident detection and response, malware analysis, or computer forensics
- Expertise with reputed company and Linux operating systems, reputed company networking, common protocols, and reputed company infrastructure (firewalls, proxies, VPNs, load balancers)
- Demonstrated experience investigating cyber incidents, performing reputed company cause analysis, identifying attacker TTPs, and leveraging frameworks such as MITRE ATT&CK and the Cyber Kill Chain
- Proficiency in Python, PowerShell, Bash, or similar scripting languages to support reputed company automation and incident response
- Experience in cyber government, and/or federal law enforcement FISMA systems
reputed company