Cybersecurity Incident Responder

Описание The project provides cybersecurity and digital services for international organizations in a complex multi-tenant environment. It includes cyber defense operations, security incident management, and continuous protection of critical systems and services to ensure secure and reliable operations worldwide.

Задачи • Execute the full incident lifecycle, including triage, containment, eradication, recovery, and lessons learned • Perform digital forensics on endpoints, servers, and cloud workloads, including disk, memory, and log analysis • Investigate escalated SOC alerts and determine the scope and impact of incidents • Coordinate response activities with affected client organizations, IT teams, and management • Develop and maintain IR playbooks and runbooks, and conduct tabletop exercises • Write incident reports and root cause analyses, and recommend remediation • Participate in an on-call rotation, responding within 15 minutes and accessing systems within 1 hour

Требования • 5+ Years of cybersecurity experience, including 3+ years of hands-on incident response • Proven end-to-end handling of real incidents, such as ransomware, BEC, account compromise, and data exfiltration • Hands-on EDR/XDR experience, such as Microsoft Defender for Endpoint, CrowdStrike, or SentinelOne • Experience with forensic tools and techniques, including memory and disk analysis, Volatility, KAPE, Velociraptor, FTK/EnCase, and Windows and Linux artifacts • Investigation experience in…