Cyber Incident Handling Analyst

Strategic Resilience Group; Deutschland; Remote; EUR 70.000 - 95.000; Vollzeit

Zusammenfassung

Strategic Resilience Group is seeking a Cyber Threat Analyst to monitor IDS/SIEM systems, triage events, and analyze logs to support incident conclusions. You will coordinate incident response with technical and non-technical teams and document resolutions from detection to closure.

Candidates should have a degree in engineering, CS, science, business, or math with several years of security experience or relevant certifications. On-site work in Germany is required.

Qualifikationen

• Bachelor's degree in Engineering, Computer Science, Science, Business Administration or Mathematics with 3 years of specialized experience.
• Associate's degree with 7 years of specialized experience.
• Major certification with 7 years of specialized experience.
• Eleven years of specialized experience may substitute for the above.

Aufgaben

• Monitor intrusion detection and security information management systems for malicious or anomalous activity.
• Triage and evaluate security events to determine whether an incident occurred.
• Analyze logs, packet captures, and related enterprise data to support incident conclusions.
• Coordinate incident response and document incidents from initial detection through final resolution

Kenntnisse

Incident response

Security monitoring

Log analysis

Triage events

Ausbildung

Bachelor's degree

Associate's degree

Major certification

Jobbeschreibung

• Monitor intrusion detection and security information management systems for malicious or anomalous activity.
• Triage and evaluate security events to determine whether an incident occurred.
• Analyze logs, packet captures, and related enterprise data to support incident conclusions.
• Coordinate incident response and document incidents from initial detection through final resolution

Required Qualifications

Required Education / Experience Bachelor of Science/Arts degree in Engineering, Computer Science, Science, Business Administration, or Mathematics plus three (3) years of specialized experience; or an Associate's degree plus seven (7) years of specialized experience; or a major certification plus seven (7) years of specialized experience; or eleven (11) years of specialized experience.

Required Specialized Certification At least one of the following: Cisco CyberOps Professional; SANS certification (any); Microsoft Certified: Security Operations Analyst Associate; Blue Team Level 1; OSDA.

Required Specialized Experience Experience monitoring intrusion detection and security information management systems; triaging and evaluating detected events; analyzing logs and packet captures; coordinating incident response with technical and non-technical parties; understanding hacker TTPs and exploits; and documenting incidents from initial detection through final resolution

Preferred Qualifications

Related Positions

Cyber Threat Analyst

Germany - RCC-E (On-site)

Intelligence Support to Information Operations (ISIO) Analyst/SME