Incident Response Analyst

Trapp Technology•Phoenix, AZ

1d•$28 - $37

About The Position

The Incident Response Analyst monitors security alerts and events of a critical nature to identify, contain, and remediate security incidents across services affecting the company’s customers. The role supports the SOC team by managing and administering security and monitoring tools. It is a full-time, overnight-shift position, remote or in Phoenix, Arizona, with no travel and an hourly salary range of $28.00–$37.00. The analyst investigates suspicious activity and potential intrusions, performs malware analysis and cybersecurity investigations, manages high-priority incidents, coordinates remediation, and communicates incident status and recommendations to technical and non-technical audiences. The role also develops and improves incident response procedures, conducts research and risk analysis, produces investigation reports, and helps develop security awareness content. Between incidents, the analyst is expected to pursue independent research and self-study on emerging technologies, security trends, and the threat landscape.

Requirements

High school diploma or GED equivalent.
At least 3 years of experience in a SOC or similar role.
Demonstrated understanding of cyber risks and threats related to cyber attacks.
Functional knowledge of the MITRE ATT&CK framework and other cybersecurity methodologies.
Strong research, critical-thinking, and reasoning skills.
Experience with malware analysis using sandboxes, OSINT, and other resources.
Ability to communicate effectively with all levels of an organization, including non-technical audiences.
Ability to follow detailed procedures and policies.
Ability to write grammatically correct, concise, and accurate notes.
Good troubleshooting skills and ability to isolate and fix problems quickly.
Strong organization and time-management skills.
Excellent written and verbal communication skills.
Strong customer service skills for internal and external customers.
Ability to manage multiple tasks and deadlines in a fast-paced environment.

Nice To Haves

Security+, CISSP, CEH, and/or ECIH certification.

Responsibilities

Investigate and triage suspicious or malicious activity using the SIEM and other approved tools, and escalate or close events as appropriate.
Perform malware analysis using sandboxes, OSINT, and other resources.
Develop operational procedures and continually improve incident response processes.
Monitor security alerts and event queues, investigating potential security incidents according to established procedures.
Classify alerts, assess impact, manage high-priority incidents, communicate with the business, and facilitate root cause analysis and resolution.
Conduct cybersecurity investigations and identify potential computer and network intrusions.
Coordinate remediation tasks with other departments and escalate unresolved incidents.
Research, perform risk analysis, and conduct security audits.
Provide technical and incident response support.
Perform post-mortem analysis, identify root causes, and design measures to prevent future incidents.
Identify, interpret, and report security vulnerabilities on systems and networks.
Write comprehensive investigation reports documenting investigation details and root cause analysis, informed by current Tactics, Techniques, and Procedures (TTPs).
Maintain written and phone communication during incident response.
Research emerging threat sources and vulnerabilities, and develop protection strategies.
Initiate and help facilitate incident call bridges with appropriate internal and customer participants, summarizing activity and providing next steps or recommendations.
Create or collaborate on security awareness content for internal and external audiences, including Trapp Technology – ArmorPoint social media platforms.
Participate in internal meetings and required trainings.
Follow company policies and procedures and maintain a professional image.
Conduct independent research and self-study between incidents to stay current on technologies, security trends, and the threat landscape.
Perform other duties as assigned.