Senior Information Security Incident Response Lead

• Lead and manage complex security incidents acting as a key contact for stakeholders.
• Perform deep analysis of security alerts to identify mitigate and remediate threats.
• Conduct forensic investigations on compromised hosts networks and cloud environments.
• Proactively hunt for adversarial activity and anomalous behaviors across large datasets.
• Analyze malware samples (basic level) to determine functionality impact and mitigation strategies.
• Develop and refine detection rules improving alert fidelity and response workflows.
• Contribute to threat intelligence gathering analyzing attack patterns and enhancing defensive strategies.
• Participate in red teaming or penetration testing activities to identify and remediate vulnerabilities.
• Provide strategic recommendations for improving the organizations security posture.
• Create detailed incident reports threat intelligence assessments and executive summaries.
• Mentor and provide guidance to junior analysts fostering continuous improvement in IR methodologies.

Qualifications & Requirements

Education & Experience:

• Bachelors or Masters degree in Computer Science Cybersecurity or a related field.
• Minimum of 5 years of experience in cybersecurity with at least 2 years in incident response threat hunting or forensic analysis.

Technical Expertise:

• Extensive experience responding to targeted attacks from APT groups cybercriminals and nation-state actors.
• Strong forensic analysis skills across Windows Linux and macOS systems.
• Expertise in network forensics traffic analysis and packet inspection (Wireshark Zeek).
• Proficiency in SIEM platforms (Splunk Sentinel QRadar) and EDR solutions (CrowdStrike Microsoft Defender ATP).
• Knowledge of malware analysis techniques including static and dynamic analysis.
• Familiarity with cloud security investigations (AWS Azure GCP).
• Strong scripting skills in Python PowerShell or similar languages for automation.
• Understanding of security architecture authentication mechanisms and enterprise IT operations is a plus.
• Experience with vulnerability management red teaming or penetration testing is a plus.
• Familiarity with MITRE ATT&CK framework and various cyber threat intelligence methodologies.

Preferred Certifications:

• GIAC (GCFA GNFA GCIH GCIA GREM)
• CISSP (Certified Information Systems Security Professional)
• CEH (Certified Ethical Hacker)
• OSCP (Offensive Security Certified Professional)
• Cloud Security Certifications (AWS Security Specialty Microsoft Azure Security)

Key Competencies:

• Strong analytical and problem-solving skills in high-pressure situations.
• Ability to manage multiple investigations efficiently while meeting deadlines.
• Excellent verbal and written communication skills with the ability to convey technical details to varied audiences.
• Strong team collaboration and leadership skills with a proactive approach to knowledge sharing.
• Ability to work in a fast-paced environment and adapt to evolving threats and challenges.

#LI-APAC