Cybersecurity Incident Response Analyst

📋 Description

• Continuously monitor security alerts from SIEM, SOAR, EDR, XDR, email security, and cloud security
• Identify potential security incidents such as phishing and malicious emails, malware and ransomware
• Perform initial investigation and validation of alerts to determine if they are true positives or
• Classify incidents based on severity, impact, and urgency
• Collect and document basic evidence (logs, alerts, affected users/devices, timestamps)
• Execute pre-approved response actions such as isolating endpoints, resetting compromised user

🎯 Requirements

• Basic understanding of cybersecurity fundamentals (CIA triad, attack lifecycle)
• Basic understanding of common attack types (phishing, malware, brute force, ransomware)
• Basic understanding of Windows, macOS, and basic Linux concepts
• Familiarity with security tools such as SIEM (e.g., Microsoft Sentinel, Splunk), EDR/XDR (e.g.
• Basic log analysis and alert interpretation skills
• Strong attention to detail