Incident Response Analyst

The Incident Response Analyst is responsible for investigating, containing, eradicating, and supporting the recovery of cybersecurity incidents across customer and enterprise environments. The role plays a critical part in minimizing business impact from cyber threats by coordinating response activities, performing technical investigations, and supporting the continuous improvement of incident response capabilities.

The role collaborates closely with Security Operations, Threat Intelligence, Digital Forensics, and customer IT teams to identify attack vectors, contain threats, and strengthen organizational resilience against future incidents.

Responsibilities:

Incident Investigation & Response

• Respond to security incidents within defined SLAs and escalation procedures. 
• Perform detailed investigations to determine Nature of the attack, Scope of compromise, Impacted systems, Attack vectors and Potential business impact 
• Analyze indicators of compromise (IOCs) and attacker activity. 
• Identify containment, eradication, and recovery actions required to mitigate incidents. 
• Coordinate incident response activities with internal and customer stakeholders. 

Threat Analysis & Root Cause Investigation

• Conduct in-depth analysis of security incidents and suspicious activities. 
• Identify vulnerabilities, attack techniques, and security gaps