Cyber Defense Response Analyst II

What you'll do

• Drive the full incident response lifecycle from initial triage to remediation.
• Perform endpoint forensics and malware analysis in a multi-cloud environment.
• Conduct regular threat hunts to identify misconfigurations, detection gaps, and anomalies.
• Use AI, Python, and REST APIs to build and integrate security tools.
• Lead regular tabletop exercises to improve team readiness.
• Maintain an exhaustive internal knowledge base of incident response runbooks and playbooks.
• Translate technical research into clear, actionable intelligence for leadership.

What we're looking for

• 2+ years of practical experience with Digital Forensics, Incident Handling, and/or Malware Analysis.
• 2+ years of experience with Q Radar, Sentinel, Splunk, Chronicle, ArcSight, or similar log management technologies.
• 2+ years of experience using forensics tools like KAPE, EnCase, Cellebrite, FTK, Magnet Axiom, and Autopsy.
• Experience with malware analysis tools like Ghidra, Ida Pro, PEStudio, and x64dbg.
• Strong understanding of computer networking, operating systems, and their intersection with Cybersecurity.
• Development experience with Python, specifically for data manipulation (Pandas) and interacting with REST APIs.
• Practical experience with AWS, GCP, or Azure.
• BA/BS in Engineering, Computer Science, or Information Security (non-tech degrees acceptable with appropriate experience or certifications).
• GCIH, GCFE, GCFA, OSCP, Sec+, and similar cyber-oriented certifications are desired (preferred).