Incident Response Analyst

• Provide real-time analysis of escalated security events to support response efforts.
• Analyze data from endpoints, EDR systems, firewalls, and servers to identify, contain, and remediate suspicious activity.
• Analyze malicious scripts and code to mitigate potential threats.
• Engage in Threat Hunting operations to proactively identify and mitigate threats.
• Conduct predictive or reactive analyses on security measures to support cyber security initiatives.
• Create system images or capture network settings from IT environments to preserve as evidence.
• Forensically duplicate digital evidence for data recovery and analysis procedures.
• Perform web service network traffic analysis to detect anomalies.
• Contribute to cyber threat intelligence analysis and bolster defensive actions.
• Post-incident analysis, identifying root causes and reinforcing security measures.
• Contribute to training and skill development opportunities for self and teammates.
• Develop or refine policies for data collection, processing, and reporting.
• Recommend cyber defense software or hardware to support responses to cyber incidents.
• Adhere to legal policies related to handling digital media.
• Stay current on emerging threats and vulnerabilities.
• Write and execute scripts to automate tasks, such as parsing large data files.
• Write cyber defense reports or white papers using research or experience.
• Write accurate technical summaries to report findings and recommendations.

See all jobs on JobTailor

Mid-Level Digital Forensics and Incident Response Analyst