Senior Incident Handler
Skills
CommandContinuous ImprovementCybersecurity Incident ResponseEDREnhanced Data Rates For GSM EvolutionInfraredMalware Analysis
What the job involves
The main requirements, responsibilities and hiring steps.
Requirements
- 5+ years in cybersecurity operations or incident response
- Experience leading complex enterprise-scale incidents end to end
- Ability to act as incident commander or technical lead in high-stakes situations
- Strong knowledge of network security EDR XDR log analysis and forensics
- Threat hunting experience across on-premises and cloud environments
- Experience with SIEM and forensics tools
- Scripting or automation skills in Python or PowerShell
- Excellent written and verbal communication skills
- CISSP GCIA GCIH GCFA OSCP or similar certification preferred
Nice to have
- Calm under pressure
- Executive presence
- Automation mindset
- Strategic thinker
- Collaborative leader
- Continuous improvement focus
Day to day
- Lead critical incident response from detection through containment eradication and recovery
- Coordinate analysts infrastructure owners legal comms and external partners during fast-moving events
- Translate complex technical findings into clear executive updates while reducing dwell time and response time
- Investigate malware identity compromise ransomware and targeted attacks using EDR XDR SIEM cloud telemetry and forensic data
- Improve SOC maturity through after-action reviews better playbooks stronger detections and automation with AI-assisted tooling
Hiring process
- Background investigation