Cyber Incident Responder

Respond to escalated cyber security incidents including investigation, remediation, and post-incident activities following documented procedures and response plans.

Analyse security logs and sensor data from multiple sources (OS events, IDS/IPS, AV, firewalls, proxies) to detect and contain threats, including malware reversal.

Develop, document, and enhance incident response plans, contribute to security posture projects, and provide thought leadership on detection and threat hunting capabilities.

7+ years of experience in cyber security with focus on incident response.

Proficiency with SIEM tools (e.g., Splunk), Endpoint Detection and Response tools (e.g., Microsoft Defender for Endpoints), and experience with malware reverse engineering.

Bachelor’s or Master’s degree in Computer Science/Information Technology Engineering.

Experience with cloud security (AWS or Azure) and scripting languages such as Python, PowerShell, or Bash.

Experienced in handling Tier 2 cyber incident responses with strong operational and documentation discipline.

Skilled in integrating multiple data sources for incident context and resolution, comfortable coordinating cross-functional teams.

Strong cyber security technical foundation with ability to lead enhancements to detection and response capabilities including threat hunting.