Expert Security Analyst – Incident Coordinator

As an Expert Security Analyst – Incident Coordinator, you will take a leadership role within the Security Incident Response Team (SIRT). Your primary focus will be on high/critical-level security incident response (Cyber, IT, OT, DLP, Physical, and driving strategic security improvements. You will also play a key role in mentoring analysts and shaping the organization’s security posture.
 
This position requires deep technical expertise, strong analytical skills, and the ability to lead complex security investigations and security improvements.
 

Role and Responsibilities 

End-to-end operations (non-deterministic work):

• Incident tracking & coordination, incident analysis, incident containment & remediation for high-to-critical risk incidents

Specialist (deterministic work)

• Execute and drive a subset of SIRT specialist capabilities (e.g., threat hunting, etc.).

Continuous Improvement (deterministic work)

• Drive the continuous development of a specific capability

SME:

• SME for specific SecOps tooling, hazards, and/or capabilities

End-to-end SIRT operations (non-deterministic work):

• Coordinate response efforts in high-to-critical risk incidents
• Collaborate with Team leads to organize resources during high-to-critical incident response
• Drive incident remediation and closure efforts with relevant stakeholders impacted/ involved in the incident.
• Organize and disseminate lessons learned to SIRT

Requirements: 

• Expertise in Security Monitoring, Log Analysis, and Threat Hunting
• Deep knowledge of a wide range of domains such as Endpoint, Network, OT, Information and Cloud Security
• Strong Leadership & Mentorship Capabilities
• Extensive knowledge in stakeholder management.
• Education – Bachelor’s or Master’s in Computer Science, Cybersecurity, or related field
• Experience – 10+ years in advanced cybersecurity roles.
• Experience working with stakeholders in a complex organization.
• Proven record of influencing upper management towards security best practices.
• Certifications – CISSP, GCIH, GCFA, CISM preferred.