Incident Responder

Job Summary

We are seeking a skilled and proactive Incident Responder / DFIR Analyst with 2+ years of experience in cybersecurity operations, incident response, and digital forensics. The candidate will be responsible for detecting, analyzing, containing, investigating, and remediating cybersecurity incidents while supporting threat hunting and forensic investigations across enterprise environments.

Key Responsibilities

• Monitor, analyze, and respond to security incidents across endpoints, networks, cloud, and enterprise systems.
• Perform triage, investigation, and remediation of security alerts generated by SIEM, EDR, IDS/IPS, and other security tools.
• Conduct digital forensic investigations involving compromised systems, malware infections, phishing attacks, insider threats, and data breaches.
• Collect, preserve, and analyze forensic evidence while maintaining chain of custody procedures.
• Perform root cause analysis and document findings through detailed incident reports.
• Investigate Indicators of Compromise (IOCs) and Indicators of Attack (IOAs).
• Support threat hunting activities to identify hidden threats and anomalous behaviors.
• Develop and update incident response playbooks, standard operating procedures (SOPs), and runbooks.
• Collaborate with SOC, Threat Intelligence, Security Engineering, and IT teams during security incidents.
• Conduct malware analysis and utilize threat intelligence feeds to enhance detection capabilities.
• Ensure timely escalation of critical incidents and provide recommendations for remediation.
• Participate in post-incident reviews and contribute to continuous improvement initiatives.