Cybersecurity Incident Response Specialist

About the role

The Cybersecurity Incident Response Specialist is tasked with detecting, investigating, analyzing, and responding to security incidents across the organization. This role ensures that threats are identified quickly, forensic evidence is collected properly, and incidents are contained and resolved efficiently.

Key responsibilities

• Monitor and analyze alerts and network events from multiple sources to spot potential incidents.
• Track, investigate, and document incidents from detection through containment, remediation, and closure.
• Analyze logs and security data to uncover indicators of compromise and suspicious activity.
• Perform digital forensic analysis and collect evidence according to forensic standards.
• Correlate incident data to identify vulnerabilities, attack patterns, and potential compromises.
• Prioritize incidents based on severity, business impact, and risk, providing remediation recommendations.
• Coordinate response activities with SOC, Threat Intelligence, IT, and other relevant teams.
• Monitor external threat intelligence sources to stay updated on emerging threats.
• Collaborate with Threat Intelligence analysts to map attack patterns and root causes.

Required profile

• Proven ability to monitor and analyze cybersecurity alerts and network events.
• Experience investigating and documenting incidents from detection to closure.
• Knowledge of digital forensic analysis procedures and evidence handling.
• Capability to correlate security events and identify attack patterns.
• Strong coordination skills with SOC, IT, and threat intelligence teams.

Required skills