CSIRT Analyst: Incident Response & Threat Hunting Expert

Computer Task; Northern (KY); Hybrid; USD 90,000 - 130,000; Full time

Job summary

CTG is seeking a CSIRT Analyst to join our security operations to defend against cyber threats. You will handle security alerts escalated by SOC, perform DFIR tasks, and participate in proactive threat hunting using modern MDR tools and SIEM/xDR platforms.

This role includes on-call incident response and collaboration across Red/Blue teams. The ideal candidate has 3–5 years of relevant experience, hands-on forensics capabilities, and a degree or equivalent experience, with a proactive, can-do

Qualifications

• 3–5 years in a similar CSIRT/IR role.
• Hands-on disk, memory and log acquisition with forensic rigor.
• Strong post-incident reporting and documentation.
• Bachelor or Master degree or equivalent experience.

Responsibilities

• Handle security alerts/incidents escalated by SOC Analysts (Tier 2).
• Collaborate with team on incidents and DFIR assignments.
• Participate in weekly Threat Hunting duties with TTPs.
• Perform compromise assessments to identify scope.
• Collect Threat Intelligence (IOCs and TTPs).
• Contribute to Detection Engineering in SIEM/xDR/SOAR.
• Co-write processes for DFIR, Threat Intelligence, Threat Hunting.
• Be part of Incident Response on-call service.

Skills

Incident Response

Threat Hunting

Digital Forensics

Threat Intelligence

Security Monitoring

MDR Tools

SIEM

Education

Bachelor's degree

Tools

CrowdStrike Falcon

Microsoft Defender for Endpoint

SentinelOne

Vectra

Darktrace

CrowdStrike Identity Protection

Microsoft Defender for Office/Cloud Apps/Identity

SOAR

Job description

CTG is seeking a CSIRT Analyst to join our security operations to defend against cyber threats. You will handle security alerts escalated by SOC, perform DFIR tasks, and participate in proactive threat hunting using modern MDR tools and SIEM/xDR platforms.

This role includes on-call incident response and collaboration across Red/Blue teams. The ideal candidate has 3–5 years of relevant experience, hands-on forensics capabilities, and a degree or equivalent experience, with a proactive, can-do