Incident Response Analyst

About the role

The Incident Response Analyst investigates, contains, eradicates, and supports recovery from cybersecurity incidents across customer and enterprise environments. This role is essential for minimizing business impact by coordinating response activities, performing technical investigations, and enhancing incident response capabilities.

Key responsibilities

• Respond to security incidents within defined SLAs, conduct detailed investigations to identify attack nature, scope, impacted systems, and business impact.
• Analyze indicators of compromise (IOCs) and attacker activity, determine containment, eradication, and recovery actions.
• Collaborate with Security Operations, Threat Intelligence, Digital Forensics, and customer IT teams to identify attack vectors and strengthen resilience.
• Perform root‑cause analysis, map attacker tactics, techniques, and procedures (TTPs) using frameworks such as MITRE ATT&CK.
• Coordinate incident response across technical teams, manage escalations to Digital Forensics or malware analysis experts, and support crisis management.
• Document findings, impact assessments, and remediation recommendations; produce executive summaries and post‑incident reviews.
• Contribute to the development and improvement of incident response playbooks, procedures, and participate in tabletop exercises.

Required profile

• Strong analytical mindset with the ability to investigate complex security incidents.
• Excellent communication skills for coordinating with internal and external stakeholders.
• Experience working in a fast‑paced security environment, preferably with SOC or threat intelligence teams.

Required skills

• Proficiency with the MITRE ATT&CK framework for threat analysis.
• Experience in Digital Forensics and Malware Analysis.
• Ability to work with indicators of compromise (IOCs) and conduct root‑cause investigations.