Senior Cybersecurity Incident Response Specialist

- High School diploma or GED - Preferred Bachelors degree in computer science or a related field - At least five years of practical experience in cybersecurity - Demonstrated proficiency in detecting, triaging, and responding to cyber incidents across enterprise networks and cloud environments - Skilled in using SIEM, EDR/XDR platforms, and forensic tools - Strong grasp of threat actor tactics, techniques, procedures (TTPs) and incident containment methods - Capability to analyze network traffic, logs, and endpoint telemetry for identifying malicious activities - Familiarity with malware analysis and reverse engineering basics - Experience in developing and refining detection rules, playbooks, and automated response workflows - Knowledge of incident response frameworks, e.g., NIST SP 800-61, SANS - Understanding of vulnerability management and threat intelligence integration - Basic understanding of computer and networking technologies, both Windows and Linux/Unix operating systems - Familiarity with networking protocols like SSH, SMB, and others - Understanding of enterprise technologies, including Active Directory and Microsoft Azure - Knowledge of current system logging technology - Ability to work effectively in a team environment - Self-motivated with the capability to work independently - Willingness to undertake new and ambiguous tasks - Strong research and self-learning abilities - Exceptional analytical and decision-making skills under pressure - Excellent written and verbal communication skills, including documentation and presentations - Leadership abilities to manage investigations and mentor junior analysts