Work as an Incident Commander/Coordinator for enterprise-wide Incident Response Plan
Recommend enhancements found through after-action reporting or proactive threat hunts
Provide constant updates and recommendations to leadership from multiple business units
Monitor security breaches and initiate incident and response management processes
Collaborate with Information Security Architects, Information Security Engineers, and stakeholders
Integrate third party attack monitoring services and threat reporting services into internal CIRT communications systems
Perform other duties as assigned

Bachelor's degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science)
6 – 8 years of related experience or equivalent experience acquired through accomplishments
Knowledge of tools, techniques, and processes (TTP) used by threat actors
Knowledge of Indicators of compromise (IOC)
Experience with Endpoint protection and enterprise detection & response software (such as CrowdStrike or Carbon Black)
Knowledge of network and infrastructure technologies including routers, switches, firewalls, etc.
Experience with cloud infrastructure and security best practice
Experience with Cloud Detection and Response technology

Principal Incident Response Analyst

Key skills