Senior Incident Response Analyst (Remote)

Placements24; Paarl; Hybrid; ZAR 600,000 - 1,200,000; Full time

Benefits offered by this job

Fully remote position

Continuous training and development

Job summary

Placements24 partners with a global data security leader to recruit a Senior Incident Response Analyst for a fully remote Security Operations Center. You will lead investigations, oversee remediation across global infrastructure, and drive containment and recovery during major security incidents.

You will perform forensic analysis, develop incident playbooks, mentor junior analysts, and coordinate with IT, legal, and communications.

Qualifications

• 6+ years of incident response, digital forensics, or security operations.
• Experience handling malware, ransomware, data breaches, and APTs.
• Strong forensic analysis skills and familiarity with network protocols, Windows and Linux.
• Proficiency with SIEM/EDR platforms and incident reporting.

Responsibilities

• Lead end-to-end response to security incidents: detect, analyze, contain, eradicate and recover.
• Perform in-depth forensic analysis of compromised systems and networks.
• Develop containment strategies to prevent threat spread.
• Conduct root cause analysis and provide remediation recommendations.
• Create detailed incident reports for technical teams and executives.
• Develop and maintain incident response playbooks and procedures.
• Monitor alerts using SIEM/EDR and other tools; collaborate with IT, legal and communications.
• Mentor junior analysts and contribute to lessons learned.

Skills

Analytical thinking

Problem solving

Communication

Documentation

Working under pressure

Education

Bachelor's degree in Computer Science, Cybersecurity, Forensics, or related field

Tools

EnCase

FTK

Volatility

SIEM

EDR

Job description

About the Role

Our client, a global leader in data security solutions, is seeking a highly motivated and experienced Senior Incident Response Analyst to join their fully remote security operations center. In this critical role, you will be responsible for leading the investigation and remediation of complex security incidents across the organization's global infrastructure. Your expertise will be vital in minimizing the impact of breaches, restoring systems, and preventing future occurrences. This is an exceptional opportunity for a seasoned professional to work from anywhere while defending against sophisticated cyber threats.

Key Responsibilities

• Lead the end-to-end response to security incidents, including detection, analysis, containment, eradication, and recovery.
• Perform in-depth forensic analysis of compromised systems and networks.
• Develop and execute containment strategies to prevent the spread of threats.
• Conduct root cause analysis of security incidents and provide recommendations for improvement.
• Create detailed incident reports for technical teams and executive management.
• Develop and maintain incident response playbooks and procedures.
• Monitor security alerts and utilize SIEM, EDR, and other security tools to identify potential threats.
• Collaborate with internal teams (e.g., IT, legal, communications) and external partners during incident response efforts.
• Stay current with the latest incident response techniques, tools, and threat actor methodologies.
• Participate in post-incident reviews and contribute to lessons learned.
• Mentor junior incident response analysts and share knowledge.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Forensics, or a related field.
• Minimum of 6 years of experience in incident response, digital forensics, or security operations.
• Proven experience managing and responding to a wide range of security incidents (e.g., malware, ransomware, data breaches, APTs).
• Expertise in digital forensics tools and techniques (e.g., EnCase, FTK, Volatility).
• Strong understanding of network protocols, operating systems (Windows, Linux), and malware analysis.
• Proficiency with SIEM and EDR platforms.
• Excellent analytical, problem-solving, and critical thinking skills.
• Exceptional communication and documentation skills, with the ability to clearly articulate complex technical details.
• Ability to work under pressure and make sound decisions during critical incidents.
• Relevant certifications such as GIAC Certified Incident Handler (GCIH), GCFA, or CISSP are highly desirable.
• Experience in a fully remote capacity is essential for this role.

Benefits

Our client offers a highly competitive salary and a comprehensive benefits package, including medical, dental, and vision insurance, a retirement plan with company match, and generous paid time off. This fully remote position provides the ultimate flexibility in work location. Employees have access to continuous training and development opportunities, cutting-edge security tools, and the chance to work on challenging, impactful security incidents. Join a world-class cybersecurity team dedicated to protecting global digital assets.