Incident Response Analyst

Overview

In this role you will strengthen CAA’s security posture by leading incident response and threat detection in a fast-paced, cloud-enabled environment. You will work within the Information Security group and IT to triage, contain, and remediate security events, while developing playbooks and coordinating with stakeholders. You’ll combine forensics, log analysis, and threat hunting to improve defenses and support business needs. This is a hands-on role for someone who wants to shape a defensible organization in a leading creative industry.

Responsibilities

• Perform day-to-day Incident Response and SOC activities for a global environment
• Design, engineer, and implement runbooks and playbooks for incident response
• Coordinate with technical and business stakeholders during incidents
• Conduct host, cloud, network, memory, and log analysis and forensics
• Lead IR efforts to identify and mitigate information security threats
• Review security information, event logs, and reports; provide findings and recommendations
• Leverage IRM leadership input and security metrics to ensure controls meet objectives; drive continual improvement
• Support other projects and periodic on-call duties

Key requirements

• Minimum 3 years in Information Technology; ideally 2 years in hands-on IR, threat hunting, or forensics
• Bachelor’s or Master’s degree in a relevant field
• Strong technical background with experience in at least two areas (Windows forensics, network traffic analysis, log analysis, Unix/Linux forensics, malware analysis)
• Understanding of servers, operating systems, networks, firewalls, cloud applications, and infrastructure
• Experience building workflows and playbooks for IR
• Knowledge of the NIST framework and continuous improvement cycles
• Experience testing and validating security controls and measuring threat response capability

• collaborative
• stakeholder management
• analytical mindset
• Windows disk and memory forensics
• Network traffic analysis (netflow, pcap)
• Log analysis

Full job description from WhatJobs. Apply for this role →