Senior Cyber Defense Incident Responder

- Facilitate and collaborate with leadership to provide expert technical assistance to cyber defense technicians for resolving incidents - Analyze incident data to pinpoint vulnerabilities and suggest actions for prompt remediation of attacks on client networks - Respond to cyber incidents as needed and act as a liaison among internal and external parties - Gather intrusion artifacts (such as malware and trojans) to aid in mitigating potential cyber incidents within the enterprise - Analyze log files from various sources to identify possible network security threats - Conduct cyber defense incident triage, determining scope, urgency, and potential impact, while identifying vulnerabilities and recommending swift remediation steps - Perform trend analysis and reporting related to cyber defense incidents - Assist in Incident Response processes and enhance behavioral analytics, including developing Concepts of Operations and Standard Operating Procedures - Create and maintain models for cyber threat mitigation and refine threat modeling approaches - Utilize behavior analytics (UBA) to ensure all infrastructure components meet performance standards - Provide coordination and expert technical support to cyber defense technicians in incident resolution - Oversee incident response functions - Monitor external data sources to stay updated on cyber defense threat conditions and assess security issues impacting the enterprise - Conduct initial, forensically sound collection of data and analyze it to identify potential mitigation strategies on enterprise systems - Receive and examine network alerts from various sources to ascertain their causes - Draft and publish after-action reviews - Generate and disseminate reports on cyber defense techniques, guidance, and incident findings to relevant parties - Mentor junior Incident Response Technicians in their tasks