We are seeking an experienced Incident Response Lead to manage and coordinate cybersecurity incident response activities. The ideal candidate will have hands-on experience in Digital Forensics and Incident Response (DFIR), investigating security incidents, conducting root cause analysis, and leading containment, eradication, and recovery efforts in enterprise environments.
Key Responsibilities
- Lead the investigation and response to cybersecurity incidents.
- Perform incident triage, analysis, containment, eradication, and recovery.
- Conduct digital forensic investigations and root cause analysis.
- Coordinate with SOC, Security Engineering, IT, and business teams during security incidents.
- Develop and maintain incident response playbooks and procedures.
- Analyze malware, phishing attacks, ransomware, and other cyber threats.
- Prepare incident reports and provide recommendations to prevent future incidents.
- Support threat hunting and continuous improvement of incident response capabilities.
- Ensure compliance with organizational security policies and industry best practices.
Requirements
- 5–7 years of experience in Cybersecurity.
- Hands-on experience in Incident Response and Digital Forensics (DFIR).
- Experience investigating security incidents in an enterprise environment.
- Knowledge of malware analysis, ransomware, phishing, and threat detection.
- Experience with SIEM, EDR, and security monitoring tools.
- Strong understanding of Windows, Linux, networking, and security fundamentals.
- Excellent analytical, troubleshooting, and communication skills.
Nice to Have
- Certifications such as GCFA, GCIH, GCFE, CHFI, CEH, CySA+, or Security+.
- Experience with cloud security incident response (Azure, AWS, or GCP).
- Scripting experience (PowerShell or Python).
