Senior Incident Response Analyst

1 day ago

Paarl, Western Cape, South Africa Placements24 Full-time

About the Role

Our client, a global leader in data security solutions, is seeking a highly motivated and experienced Senior Incident Response Analyst to join their fully remote security operations center. In this critical role, you will be responsible for leading the investigation and remediation of complex security incidents across the organization's global infrastructure. Your expertise will be vital in minimizing the impact of breaches, restoring systems, and preventing future occurrences. This is an exceptional opportunity for a seasoned professional to work from anywhere while defending against sophisticated cyber threats.

Key Responsibilities

  • Lead the end-to-end response to security incidents, including detection, analysis, containment, eradication, and recovery.
  • Perform in-depth forensic analysis of compromised systems and networks.
  • Develop and execute containment strategies to prevent the spread of threats.
  • Conduct root cause analysis of security incidents and provide recommendations for improvement.
  • Create detailed incident reports for technical teams and executive management.
  • Develop and maintain incident response playbooks and procedures.
  • Monitor security alerts and utilize SIEM, EDR, and other security tools to identify potential threats.
  • Collaborate with internal teams (e.g., IT, legal, communications) and external partners during incident response efforts.
  • Stay current with the latest incident response techniques, tools, and threat actor methodologies.
  • Participate in post-incident reviews and contribute to lessons learned.
  • Mentor junior incident response analysts and share knowledge.

Requirements

  • Bachelor's degree in Computer Science, Cybersecurity, Forensics, or a related field.
  • Minimum of 6 years of experience in incident response, digital forensics, or security operations.
  • Proven experience managing and responding to a wide range of security incidents (e.g., malware, ransomware, data breaches, APTs).
  • Expertise in digital forensics tools and techniques (e.g., EnCase, FTK, Volatility).
  • Strong understanding of network protocols, operating systems (Windows, Linux), and malware analysis.
  • Proficiency with SIEM and EDR platforms.
  • Excellent analytical, problem-solving, and critical thinking skills.
  • Exceptional communication and documentation skills, with the ability to clearly articulate complex technical details.
  • Ability to work under pressure and make sound decisions during critical incidents.
  • Relevant certifications such as GIAC Certified Incident Handler (GCIH), GCFA, or CISSP are highly desirable.
  • Experience in a fully remote capacity is essential for this role.

Benefits

Our client offers a highly competitive salary and a comprehensive benefits package, including medical, dental, and vision insurance, a retirement plan with company match, and generous paid time off. This fully remote position provides the ultimate flexibility in work location. Employees have access to continuous training and development opportunities, cutting-edge security tools, and the chance to work on challenging, impactful security incidents. Join a world-class cybersecurity team dedicated to protecting global digital assets.