Senior Security Monitoring and Response Analyst (Incident Responder)

Serve as escalation point for alerts from SIEM, EDR, performing advanced triage, log analysis, malware analysis, and impact assessments.

Lead incident response activities including containment, eradication, recovery, and documentation during cybersecurity incidents.

Collaborate cross-functionally to investigate root causes, improve detection logic, create/update SOPs, and support threat hunting efforts.

Advanced expertise with Security Operations, Incident Response, DFIR, Threat Detection, and Malware Reverse Engineering.

Proficient in log analysis and experienced with EDR platforms and SIEM tools such as Splunk or Sentinel.

Experience leading complex incident investigations including cloud and on-prem environments.

Work Experience Required: Not explicitly mentioned in the JD.

Experienced in managing and mentoring within fast-paced SOC environments focusing on incident detection and response.

Strong knowledge of network security, OS internals (Windows, Linux), and attacker techniques based on MITRE ATT&CK framework.

Familiarity with cloud security platforms (Azure, AWS, GCP) and developing IR playbooks, SOPs, and detection logic improvements.