Incident Response Analyst II

Job Description

Job description

What We Offer:

- Monitor and analyze security events and incidents to identify potential threats and vulnerabilities
- Develop and maintainincident responseplans and procedures
- Conduct regular security assessments and audits to identify potential risks and vulnerabilities
- Investigate and respond to security incidents, including containment, eradication, and recovery
- Collaborate with cross-functional teams to implementsecurity controlsand measures to prevent future incidents
- Stay up to date with the latestcybersecuritytrends and best practices
- Provide training and guidance to employees oncybersecurityawareness and best practices

Education and Qualifications:

- Bachelor's degree in computer science, Information Technology, or a related field
- Minimum of 3 to 6years of experience inincident response
- Strong understanding ofincident responseprocedures and tools
- Experience withsecurity monitoringand analysis tools
- Knowledge of network and system security, includingfirewalls,intrusion detectionsystems, andvulnerability management
- Excellent problem-solving and analytical skills
- Ability to work under pressure and handle multiple incidents simultaneously
- Strong communication and interpersonal skills
- Relevant certifications such as CISSP,CISM, orGIACare a plus
- At Phenom , we value diversity and are committed to creating an inclusive and supportive work environment. We offer competitive salaries, benefits, and opportunities for growth and development. If you are passionate aboutcybersecurityand want to be part of a dynamic and innovative team, we encourage you to apply for this exciting opportunity.

Work Experience

What You've Done:

- Analytical and investigative abilities with hands-on experience oncyber securityincident responseand responseautomationstrategies, and ability to work to tight guidelines and under high pressure in the context of cyber incidents
- Experience working withThreat modeling(e.g., STRIDE, PASTA, FAIR, Security Cards), operational threat intelligence, and attack framework standards (e.g., MITRE ATT&CK) with a good understanding of the Cyber Kill Chain and pervasive threat attack methods and remediation.
- Good understanding and hands-on experience with commonsecurity systems, including WAF, IPS/IDS, EDR, DLP, authentication systems, content filtering, etc.
- Experience developing detection logic for enterprise SIEM systems and with exploitation techniques and use case development.
- Experience in the detection and response to malicious activity using log data and alerts fromcybersecuritysolutions, systems andnetwork devices.
- Experience extracting and analyzing forensic artifacts across Windows, Mac, and Linuxoperating systems.
- Coding Experience in Scripting & programming languages (such as Java,Bash, Python, PowerShell etc.)to use these skills to aid in responding to incidents involving Windows, Linux, and Mac hosts, as well as automate common analytical processes to reduce analyst time and avoid repetitiveincident responsetasks.
- Experience supporting anIncident ResponseProgram through the development ofprocedural documentation (playbooks and runbooks).
- Understanding ofAmazon Web Services cloudenvironments and itssecurity controlsand their corresponding challenges.
- Understanding ofmicroservicesarchitecture & distributed Platforms especially in the SaaS businesses
- Understanding of global frameworks and standards like NIST, ISO 27001/27002/27017/27018, GDPR, etc.
- An Information Security qualification or evidence of starting to work toward SANSGCIH, GCIA, GREM,GCFA,OSCPor similar certification.
- Thought leadership, critical thinking & problem solver, strong organizational skills, report writing skills to senior level, ability to prioritize and multitask.

Benefits

- We want you to be your best self and to pursue your passions
- Health and wellness benefits/programs to support holistic employee health
- Flexible hours and working schedules, as well as parental leave for new parents
- Growing organization with career pathing and development opportunities
- Tons of perks and extras in every location for all Phenoms

---