Incident Response Analyst

Primary Responsibilities : Incident Monitoring : Monitor and assess security alerts from systems like SIEM, IDS/IPS, and EDR, escalating as needed. Triage and Analysis : Investigate incidents to determine scope, impact, and root causes, documenting findings and actions. Incident Response : Contain, eradicate, and recover from threats in coordination with IT and security teams. Forensics : Perform digital forensics and ensure proper evidence collection for potential legal actions. Documentation and Reporting : Maintain records, create incident reports, and suggest improvements to policies. Collaboration : Work with IT, legal, and compliance teams; provide clear incident updates to stakeholders. Continuous Improvement : Conduct post-incident reviews and refine response procedures and playbooks. Policy Development : Contribute to the creation and update of response playbooks and security training programs. Key Skills & Knowledge : Bachelor's degree in Computer Science, Cybersecurity, or related field. 5+ years of experience in cybersecurity and incident response. Strong analytical skills to handle incidents and recommend remediation. ITIL Foundation certified; experience in regulated environments. Excellent communication and organizational skills. Key Contacts : SOC, IT Operations, Threat Intelligence, and Forensic teams. Legal, Compliance, Risk Management, and external vendors.