L3 Threat Response Analyst

As a Senior Threat Response Analyst you will be responsible for conducting advanced incident investigations, responding to critical security threats, and driving containment and remediation efforts. The ideal candidate has hands-on experience with multiple security technologies, including SIEM, IDS, APT, and WAF, forensic analysis, and is adept at handling sophisticated cyber threats such as botnets and advanced persistent threats (APTs).

Your Role and Responsibilities

Incident Response and Digital Forensic

• Provide incident investigation as per Security Incident Management Process / Guidelines.
• Drive containment strategy during incidents escalated by the triage team.
• Investigate and resolve advanced vector attacks such as botnets and advanced persistent threats (APTs).
• For critical incidents, be part of CSIRT activities and execute the incident handling process.
• Coordinate with IT, security operations, and other teams for remediation and trigger forensic processes as appropriate.
• Perform Root Cause Analysis (RCA) for security incidents and update knowledge management.
• Work directly with data asset owners and business response plan owners during high-severity incidents.

Client Management

• Engage with clients during debrief meetings to address questions, gather feedback, and align on security objectives.
• Provide tuning recommendations for IDS, proxy policies, and in-line malware tools based on threat feeds, trust and reputation data, incidents, or vulnerabilities and exploits of downstream systems.
• Provide tuning recommendations to administrators based on findings from investigations or threat information reviews.
• Prepare and deliver comprehensive weekly and monthly Threat Incident debrief reports for clients, including insights on security trends, incidents, system performance, and recommendations.