Cybersecurity Engineer Lead

Security Analyst

Conduct real-time analysis using the SIEM, Cloud, Endpoint and Network based technologies, and other security analytics tools

Script basic tasks with high-level scripting languages, such as Python, PowerShell or Bash.

Serve as an escalation point for sophisticated cyber incidents which require expertise in Incident Response(IR), Digital Forensics, Malware analysis, deep analysis of adversarial Tactics, Techniques and Procedures(TTPs), Network and Cloud security.

Possess a deep understanding of digital forensics principles, techniques, and tools, including the ability to conduct forensic analysis of digital devices, collect and preserve evidence, and analyze logs and network traffic.

Design and facilitate tabletop exercises for both cybersecurity and non-cybersecurity personnel to enhance the organization's incident response plans, procedures, and preparedness.

Incorporate intelligence into the workflow and correlate it with tracked threat activity to gain a comprehensive understanding of potential or active security incidents.

Triage potentially malicious binaries and/or other types of Malware, including familiarity with basic to intermediate malware static/dynamic analysis techniques.

Posses basic understanding of cyber deception techniques, tools, and strategies to include but not limited to honeypots, honey nets, bot sinks, honey tokens, active defense, etc.

Pivot through open-source and internal frameworks for related data associated with potentially malicious Indicators of Compromise (IoCs) and Indicators of Attack (IoAs).

Prepare and report comprehensive After Action Reports (AARs) detailing at executive and technical levels the analysis and investigation performed by the cyber incident responders for appropriate stakeholders.

Coordinate with different teams to improve threat detection, response, and improve overall security posture of the Enterprise.