Cybersecurity Engineer – Incident Response

Lead incident response activities through all phases of an incident

Conduct triage and investigation of potential cybersecurity incidents to determine incident scope and severity

Develop and execute containment strategies

Perform investigations and root cause analysis to identify attack vectors, tactics, and impact

Conduct comprehensive security event log analysis to validate security detections, investigate alerts, and identify attacks across endpoint/EDR, network, application, and cloud logs and audit trails

Conduct digital forensic acquisition and analysis of artifacts from endpoint systems, servers, network devices and logs, cloud environments, mobile devices, and storage media

Maintain clear stakeholder communication throughout the incident lifecycle

Prepare comprehensive post-incident reports with preventive recommendations

Provide expert input for automating Security Operations, including implementing SOAR playbooks

Develop and test incident response playbooks and processes

Maintain situational awareness of the cybersecurity landscape and emerging threat actor TTPs

Collaborate with GovTech, government agencies, and commercial partners to mitigate cyber risks and bolster security postures

Requirements

Bachelors Degree in Computer Science/Information Security or equivalent

Professional certifications, including GCFA, GREM, GNFA, GCTI, CISSP or other relevant certifications will be preferred

Preferably 5 years or more of experience as a full-time incident responder/digital forensic/malware analysis or related discipline

Understanding of operating systems and platform (e.g. Windows, Linux) and knowledge of computer networking, LAN, and server

Proficient in Forensic Tools such as AXIOM, FTK or Autopsy

Ability to perform basic static and dynamic malware analysis and to analyse network and application logs

Good working knowledge of Cloud and Container technologies are a plus

Familiarity with good security practices

Good communication and interpersonal skills, with the ability to multitask and priortise

Meticulous and demonstrate a high degree of integrity, initiative, energy and endurance

Ability to work in a hybrid workplace arrangement

Core Competencies

Demonstrates expertise in incident response, digital forensics, and cybersecurity analysis, with a strong focus on developing and executing containment strategies and incident response playbooks. Proficient in utilizing forensic tools and maintaining effective communication with stakeholders throughout the incident lifecycle.

Highest-signal resume keywords

Incident Response Leadership

Digital Forensics Expertise

Forensic Tool Proficiency

Cybersecurity Incident Investigation

Professional Certifications (GCFA, CISSP)

Hard Skills

Incident Response

Digital Forensics

Malware Analysis

Security Event Log Analysis

Root Cause Analysis

Containment Strategies

Static and Dynamic Malware Analysis

Network Log Analysis

Application Log Analysis

Cloud Security Practices

Soft Skills

Communication Skills

Interpersonal Skills

Multitasking

Prioritization

Integrity

Certifications & Qualifications

GCFA

GREM

GNFA

GCTI

CISSP

Industry Keywords

Cybersecurity

Incident Triage

Threat Actor TTPs

Security Operations Automation

Stakeholder Communication

Tools & Technologies

AXIOM

FTK

Autopsy

Endpoint Detection and Response (EDR)

Cloud Technologies

Container Technologies

#J-18808-Ljbffr