Incident Response Analyst II

The Incident Response Analyst II is responsible for the in-depth investigation and containment of confirmed security incidents. This position involves executing predefined incident response plans, conducting thorough technical analyses, and implementing immediate actions to mitigate threats. Level II analysts collaborate closely with both technical teams, such as network engineers and system administrators, and business users to gather detailed information and contain incidents.

They possess advanced technical skills in digital forensics, threat analysis, and network security. Execute incident response plans to contain and recover from security events. Conduct technical analysis and forensic examinations of incidents. Implement actions to mitigate threats and prevent incident spread. Proactively Identify attack tools, techniques and practices used by threat actors and ensure that they are mitigated.

Expand the coverage of protection capabilities and track against MITRE ATT&CK techniques Coordinate and communicate with internal and external stakeholders. Engage with business users to gather detailed information. Perform digital forensics and analyze digital evidence. Conduct threat analysis and understand attack characteristics.

Contain incidents and remove malicious code. Other duties as assigned.

Education and Experience

Qualifications Bachelor's or Master’s degree in cybersecurity, information technology, computer science, or a related field preferred. 3-5 years of experience in cybersecurity. Significant experience in incident response or SOC analyst roles. Hands-on experience with various security tools. Additional Qualifications Familiarity with securing cloud environments and handling incidents in cloud-based infrastructures.

Scripting or coding skills (e.g., Python, PowerShell) for automating incident response tasks and developing custom security tools. Understanding of regulatory and compliance standards (e.g., GDPR, NIS2, NIST) and their implications for incident response and data protection. Relevant security certifications such as: Certified Information Systems Security Professional (CISSP) Certified Ethical Hacker (CEH) Offensive Security Certified Professional (OSCP) Certified Cloud Security Professional (CCSP) CompTIA Cybersecurity Analyst (CySA+)