Incident Response Analyst

Jobgether; United States; Remote; USD 10,000 - 13,000; Full time

Benefits offered by this job

Remote work in India

Hands-on exposure to real-world cyber_

Job summary

Jobgether is seeking an Incident Response Specialist to drive containment, remediation, and forensic investigations for customer environments. You will coordinate IR activities, analyze malware, and extract IOCs to improve detection capabilities.

You’ll participate in 24/7 on-call rotations and collaborate with threat intelligence and hunting teams while contributing to tooling and process improvements within a remote India-based team.

Qualifications

• Experience in incident response within a SOC or equivalent cybersecurity org.
• Hands-on host-based and network digital forensics.
• Strong knowledge of IR methodologies, forensics, and threat hunting.
• Ability to identify TTPs used by threat actors.
• Familiarity with malware analysis and malicious file investigations.
• Strong analytical and problem-solving skills for complex incidents.
• Ability to coordinate work within a team and communicate findings to tech and non-tech audiences.
• Preferred: experience with EDR/XDR or SIEM solutions.
• Willingness to participate in 24/7 on-call rotations.

Responsibilities

• Execute containment and remediation procedures for cybersecurity incidents across customer and prospective customer environments.
• Coordinate incident response activities to ensure timely and effective resolution of security threats.
• Conduct forensic investigations of compromised hosts and network assets, identifying the scope and impact of incidents.
• Develop actionable remediation plans based on forensic findings and investigation results.
• Analyze potentially malicious files to understand their functionality, behavior, and techniques.
• Extract indicators of compromise (IOCs) and contribute them to detection capabilities to improve threat identification.
• Participate in an on-call rotation to support 24/7 security escalations outside standard business hours.
• Contribute to the enhancement and development of incident response tools, processes, and capabilities.
• Collaborate with cyber threat intelligence and threat hunting teams to share findings, evidence, and investigation artifacts.
• Train and support security operations team members on incident response practices and procedures.

Skills

Incident response

Digital forensics

Threat hunting

Threat intelligence

Malware analysis

On-call coordination

Communication

Tools

EDR

XDR

SIEM

Job description

Accountabilities

- Execute containment and remediation procedures for cybersecurity incidents across customer and prospective customer environments.

- Coordinate incident response activities to ensure timely and effective resolution of security threats.

- Conduct forensic investigations of compromised hosts and network assets, identifying the scope and impact of incidents.

- Develop actionable remediation plans based on forensic findings and investigation results.

- Analyze potentially malicious files to understand their functionality, behavior, and techniques.

- Extract indicators of compromise (IOCs) and contribute them to detection capabilities to improve threat identification.

- Participate in an on-call rotation to support 24/7 security escalations outside standard business hours.

- Contribute to the enhancement and development of incident response tools, processes, and capabilities.

- Collaborate with cyber threat intelligence and threat hunting teams to share findings, evidence, and investigation artifacts.

- Train and support security operations team members on incident response practices and procedures.

Requirements

- Previous experience performing incident response within a Security Operations Center (SOC) or an equivalent cybersecurity organization.

- Hands-on experience with host-based and network digital forensics.

- Strong knowledge of incident response methodologies, digital forensics, and cyber threat hunting.

- Ability to identify and understand threat actors’ tactics, techniques, and procedures (TTPs).

- Familiarity with malware analysis and malicious file investigation.

- Strong analytical and problem-solving skills, with the ability to assess complex security incidents.

- Ability to coordinate assignments within a team and communicate technical findings clearly to both technical and non-technical audiences.

- Preferred: Experience monitoring and working with Endpoint Detection and Response (EDR), Extended Detection and Response (XDR), or Security Information and Event Management (SIEM) solutions.

- Willingness to participate in an on-call rotation supporting security incidents around the clock.

Benefits

- Annual salary range of USD 10,000–13,000 , with final compensation depending on seniority, relevant experience, and other job-related factors.

- Remote working arrangement based in India.

- Hands-on exposure to real-world cybersecurity incidents and customer environments.

- Opportunities to deepen expertise in incident response, digital forensics, malware analysis, threat intelligence, and threat hunting.

- Collaboration with specialized security operations and threat hunting teams.

- Opportunity to contribute to the improvement of security tools, detection capabilities, and incident response processes.

- Scope to share knowledge and develop expertise through team training and collaboration.