Staff CSIRT Analyst

**Incident Response & Triage:**

• Lead identification, triage, and validation of security incidents as the ultimate SOC escalation point.
• Manage the full incident response lifecycle with clear milestones and proactive blocker anticipation.

**Strategic Preparedness & Telemetry:**

• Design and execute tabletop exercises and purple teaming to ensure organizational readiness.
• Partner with engineering and detection teams to tune telemetry for high true-positive rates.

**Offensive Security & Continuous Improvement:**

• Collaborate with Offensive Security to close visibility gaps against modern threat actor TTPs.
• Own post-incident reviews and drive remediation tasks for tooling and process enhancements.

**Communication & Documentation:**

• Develop stakeholder-ready reports and lessons learned after major incidents.
• Maintain playbooks, system configurations, and incident response standards for scalability.