Incident Response Analyst, React

What you'll do

• Execute immediate defensive maneuvers at the Cloudflare edge including WAF rules and L3/L4 DDoS shunning.
• Perform real-time traffic filtering to neutralize attacks before they reach the customer's origin.
• Manage the end-to-end incident response lifecycle, including investigation, containment, remediation, and recovery.
• Develop customized tactical and strategic remediation plans for compromised organizations based on specific attack patterns.
• Analyze, track, and triage malicious activity across on-premises, cloud, and hybrid environments.
• Communicate complex technical findings and guidance to customers at executive, director, and engineering levels.
• Collaborate with forensic analysts and threat researchers to detect, isolate, and mitigate security threats.

What we're looking for

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related technical field.
• 5+ years of overall experience in cybersecurity.
• 2+ years of dedicated Incident Response experience.
• In-depth understanding of Windows operating systems and knowledge of Unix, Linux, and Mac environments.
• Familiarity with cloud environments including AWS, Azure, O365, Google Cloud, and Cloudflare.
• Strong understanding of L3/L4/L7 attack patterns and frameworks like MITRE ATT&CK and NIST.
• English fluency with excellent verbal and written communication skills for technical and executive audiences.
• Authorization to receive software or technology controlled under U.S. export control laws.