CSIRT Analyst

Incident Response & Triage:

• Lead the identification, triage, and validation of security incidents through various telemetry sources.
• Act as the ultimate escalation point for the SOC.
• Partner with engineering, product security, and detection engineering teams to tune existing telemetry sources.

Strategic Preparedness:

• Drive organizational incident readiness by designing and executing practical response exercises (tabletops and purple teaming).
• Ensure first responders are prepared at all levels of our organization.
• Partner with product security, engineering, detection engineering, and other applicable business units to close these gaps.

Continuous Improvement & Leadership:

• Lead cross-functional Post-Incident Reviews (PIRs) to extract critical lessons learned.
• Own the lifecycle of resulting remediation tasks, driving specific tooling and process enhancements.
• Harden organizational defenses and response against future threats.