Senior Cyber Security Analyst – Incident Response

This is a fully remote position, open to applicants in Arizona, +2 more states.

📋 Description

• Conduct investigations into SIEM/SOAR events, responding to and containing incidents through expertise in malware analysis, network security, and endpoint security.

• Take the lead on incidents while coordinating technical investigations, mitigation efforts, and remediation actions.

• Collaborate with both technical and business stakeholders.

• Ensure that information security incidents are detected, documented, investigated, and resolved effectively.

• Develop countermeasures and mitigation strategies in response to incidents.

• Provide operational insights to enhance threat hunting efforts following incidents or events.

• Establish countermeasures and mitigations aimed at addressing both commodity and targeted threats.

• Monitor and track evolving techniques used by threat actors.

• Offer post-incident recommendations to enhance communication, processes, procedures, and mitigation strategies.

• Assist Threat Hunting, Intelligence, and Monitoring functions through content development, threat analysis, detection suggestions, and mentoring colleagues.

• Work to restore operations during cyber incidents.

⛳️ Requirements

• A Bachelor's Degree combined with 8 years of experience, or a High School Diploma or GED/Equivalent with 12 years of experience in Information Security.

• Preference for candidates with over 2 years of Threat Hunting experience.

• Familiarity with MITRE ATT&CK and its use in creating countermeasures is advantageous.

• Proven experience in analyzing, evaluating, and escalating security events across systems, applications, networks, authentication, and email.

• Experience in translating threat actor techniques into mitigations using tools such as YARA, Sigma, or regular expressions.

• Capability to define security requirements and drive project deliverables effectively.

• Ability to manage multiple incidents and ensure timely responses.

• Experience in responding to cloud-related incidents in platforms such as Azure, AWS, and Google Cloud.

• Preferred candidates will have cloud administrative experience.

• A minimum of 3 years in Cyber Incident Response is required, with Incident Response being the primary function.

• Required participation in a weekly after-hours on-call rotation.

• Strong communication skills with the ability to articulate complex issues to broader audiences.

🏝️ Benefits

• Total compensation may include variable incentives, bonuses, benefits, and/or additional awards.

• A competitive, well-structured, and high-quality benefits program.

• Participation in the after-hours on-call rotation.