Cybersecurity Analyst (Incident Response & Investigation)
Role Overview
The Cybersecurity Analyst is responsible for monitoring, detecting, analyzing, and responding to cybersecurity threats across enterprise environments. This role plays a critical part in conducting end-to-end incident investigations, performing root cause analysis, and strengthening the organization’s overall security posture.
Key Responsibilities
Incident Response & Investigation:
• Lead end-to-end investigations from detection to recovery
• Perform forensic analysis and coordinate response
Root Cause Analysis & Continuous Improvement:
• Conduct RCA and recommend corrective actions
• Enhance playbooks and processes
Threat Monitoring & Hunting:
• Monitor SIEM/SOAR tools and perform threat hunting
Endpoint Security:
• Use EDR tools for investigations and containment
Stakeholder Communication:
• Prepare reports and communicate findings
Required Qualifications
• Bachelor’s Degree in Computer Science, Cybersecurity, MIS, or equivalent
• 7+ years in IT and Cybersecurity
• 3+ years in incident response and investigations
• Proven experience in RCA and end-to-end investigations
Required Skills & Expertise
Enterprise Security Platforms:
• Microsoft Sentinel, Defender, Entra ID, M365
• Alert triage, log analysis, access investigations
Endpoint Detection:
• CrowdStrike Falcon experience
• Threat hunting, behavioral analysis, containment
Security Operations:
• SIEM, SOAR, EDR tools
Frameworks:
• NIST, MITRE ATT&CK
Soft Skills:
• Strong problem-solving and communication
Preferred Qualifications
• Certifications: CISSP, CEH, GCIH
• Cloud security experience (Azure/AWS/Google Cloud Platform)
Success Criteria
• Reduced incident response time
• Improved security posture
• Enhanced automation and efficiency
Never miss an opportunity! Create an alert based on the job you applied for.
