Cyber Security Analyst

SoTalent lists an opportunity for a Senior Cybersecurity Incident Response Engineer focused on incident response, digital forensics, and proactive threat detection across enterprise, cloud, and product environments. The role investigates sophisticated threats, strengthens security controls, and develops detection and response capabilities.

Responsibilities:

• Lead incident response activities, including investigation, containment, eradication and recovery across corporate, cloud and product environments
• Conduct proactive threat hunting across endpoints, networks and cloud workloads to identify indicators of compromise and emerging threats
• Investigate cloud security incidents across AWS, Azure, GCP, Kubernetes and containerised environments
• Perform log analysis, identity compromise investigations and workload forensics
• Conduct digital forensics, malware analysis and root cause investigations
• Develop and optimise security orchestration and automation playbooks in collaboration with Security Engineering teams
• Build and improve threat detection strategies across cloud, identity, endpoint and product environments
• Apply frameworks such as MITRE ATT&CK to map adversary behaviours and improve detection coverage
• Advise engineering and business teams on secure design principles and incident response standards
• Contribute to cybersecurity policies, standards and performance metrics to strengthen overall security posture

Requirements:

• Bachelor's degree in Computer Science or a related discipline, or equivalent practical experience
• Approximately 8+ years of hands-on experience in cybersecurity incident response and threat hunting, including cloud environments
• Strong understanding of cloud security principles, identity and access management, and workload protection
• Experience with product security investigations, vulnerability analysis and secure coding practices
• Expertise in digital forensics, intrusion detection, threat intelligence and malware analysis
• Advanced knowledge of network analysis, Windows, Linux and macOS internals, and web application security
• Experience identifying abnormal behaviour, assessing exploit paths and investigating sophisticated attacks
• Familiarity with cloud-native security tools such as AWS GuardDuty, Azure Sentinel and GCP Security Command Center
• Development experience using Python, Go or similar languages for security automation
• Hands-on experience with Docker, Kubernetes, container security and CI/CD pipelines
• Knowledge of AI security is advantageous
• GCIH
• GCFA
• CISSP
• AWS or Azure Security Specialty certifications