Engineer II – Cyber Incident Response

This is a fully remote position, open to applicants in India.

📋 Description

• Investigate and address cybersecurity incidents, such as phishing, malware, ransomware, and unauthorized access attempts.

• Analyze logs, alerts, and forensic data to assess the scope and impact of incidents.

• Escalate complex or high-severity incidents to Engineer III, Lead, or Principal personnel, ensuring thorough documentation and evidence are provided.

• Assist in containment, eradication, and recovery efforts.

• Develop and uphold SOC playbooks, runbooks, and standard operating procedures.

• Collaborate with teams specializing in threat intelligence, vulnerability management, and forensics.

• Engage in lessons-learned sessions and suggest enhancements to SOC processes and tools.

• Provide support to junior analysts by sharing expertise and offering investigative guidance.

• Work alongside global cyber defense teams to mitigate threats, reduce business impact, and enhance detection capabilities.

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent professional experience.

• Strong understanding of cybersecurity fundamentals, incident response methodologies, and adversary tactics.

• Familiarity with NIST, MITRE ATT&CK, and ISO 27035 frameworks.

• Over 5 years of progressive experience in cybersecurity, with at least 2 years in SOC operations or incident response.

• Hands-on experience with SIEM, EDR, and forensic tools, including Splunk, CrowdStrike, and Wireshark.

• Ability to analyze logs, alerts, and artifacts for incident investigation purposes.

• Excellent written and verbal communication skills.

• A minimum of 2 years of experience in incident response, SOC, or a related technical domain.

• Strong proficiency in a primary technical area, such as Endpoint Forensics.

• Working knowledge of at least one related area, such as Cloud Security.

• Relevant industry certifications are preferred, including GCIH, GCIA, CompTIA Security+, CySA+, and CEH.

🏝️ Benefits

• Competitive salary and performance-based incentives.

• Comprehensive health, dental, and vision insurance.

• Opportunities for professional development and continuing education.

• Flexible work environment with remote work options.

• Generous vacation and paid time off policies.