Cybersecurity Incident Responder responsible for handling cybersecurity incidents. This includes

detecting, analyzing, triaging, and containing an incident from being spread within the organization. It

also includes recovery from an incident as well as threat assessment.

Scope of work

• Correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation.

• Perform analysis of log files from a variety of sources (e.g., individual host logs, network traffic logs, firewall logs, and intrusion detection system \[IDS\] logs) to identify possible threats to network security.

• Perform cyber defense incident triage, to include determining scope, urgency, and potential impact, identifying the specific vulnerability, and making recommendations that enable expeditious remediation.

• Receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts.

• Track and document cyber defense incidents from initial detection through final resolution.

• Collect intrusion artifacts (e.g., source code, malware, Trojans) and use discovered data to enable mitigation of potential cyber defense incidents within the enterprise.

Job Details

Preferred Candidate