Incident Response Analyst

TechDigital Group; New York (NY); On-site; USD 85,000 - 120,000; Full time

Job summary

TechDigital Group in New York, NY seeks an experienced Incident Response Analyst to join our security operations. You will support incident response, orchestration with the SOC, and threat hunting across IDB devices and networks.

You will also help improve detection, containment, and remediation processes using our SOAR platform. The role requires hands-on experience with CrowdStrike Falcon, strong documentation, and cross-functional collaboration to safeguard data and IP while continuously

Qualifications

• Proficient in incident response processes and lifecycle management.
• Familiar with CrowdStrike Falcon ecosystem and EDR tooling.
• Experience coordinating with SOC teams and IT/Security Ops.
• Understanding of sensor management and policy configuration.

Responsibilities

• Document evidence throughout incident life cycle and handover shifts.
• Triage security incident tickets/events, prioritize and assign.
• Analyze threat data and build evidence-backed dispositions.
• Contain and remediate actions including network isolation where needed.
• Maintain detailed case reports in the case management tool.
• Contribute to SOAR playbooks and runbooks, update response docs.
• Monitor detection programs to protect data and IP from threats.
• Hunt for malicious activity and anomalous events across IDs networks.
• Coordinate remediation after findings and drive improvement actions.
• Collaborate with Security Architecture to integrate TM tools.

Skills

Incident Response

CrowdStrike Falcon

SOC Collaboration

Policy Configuration

Tools

SOAR

IDB Tools

Job description

What are the top skills required for this role?

• a. Incident Response support along with IDBNY team and SOC provider.
• b. Would need to understand the broader Crowdstrike Falcon ecosystem

Job Description/ Responsibilities

Would need to understand the broader Crowdstrike Falcon ecosystem. Would also need to understand to understand sensor management, policy configuration.

Perform the Incident Response support along with IDBNY team and SOC provider.

Key activities include:

• Responsible for documenting evidence throughout the incident life cycle, conducting shift handovers, escalating security events to incident response, and providing support during cyber security incidents
• Responsible for the ticket queue triage: prioritization, assignment and disposition of security incident tickets/events.
• Responsible for analyzing threat data from multiple sources and building evidence backed dispositions.
• Responsible for front line triage and response including some containment and remediation actions such as network isolation of hosts and blocking indicators of compromise within security perimeter tools.
• Analyst must keep detailed reports on all analysis activity, documented in the case management tool to validate process adherence.
• Responsible for contributing to the creation and updating of new and existing SOAR playbooks and runbooks and general response documentation.
• Monitor IDB's security detection and response program to protect IDB's Data and IP from both internal and external threats
• Hunt for, detect, and respond to malicious activity and anomalous events on IDB devices and networks
• Utilize IDB tools to automate detection and automatically find and address future vulnerabilities
• Manage/coordinate remediation efforts after security assessment findings outline weaknesses requiring attention.
• Working with the threat modelling lead in Security Architecture to integrate TM tools into the Security Design Review Process.
• Review Vendor software/hardware and Third-Party information security integration controls/risks and document gaps and issues for action.
• Document, formulate and enforce areas of security improvement that balance risk with business operations and do not diminish efficiencies or innovation.
• Foster strong cross-functional relationships internally between Infrastructure, Application teams and external vendors.