Incident Responder: Cyber security incident response (DFIR) engagements covering incident handling and coordination, in-depth technical analysis, and investigation through to recovery
Identify patterns and behaviours related to threat actors and propose improvements to detection and protection capabilities
Ability to communicate complex cyber-attacks to technical and non-technical audiences with recommended mitigating actions
Perform post incident lessons learned, root cause analysis and incident reporting Conduct threat hunting across a large range of security solutions and products.
Logs from SIEM, WAF, IPS/IDS, Network Anomaly, AV, EDR etc...
Lead and support Digital Forensics investigations and produce technical findings reports
Support team in driving continual improvements in incident response and threat detection Required Technical and Professional Expertise
