Incident Response Analyst

• Lead cybersecurity investigations associated with escalated security incidents and suspicious activity
• Serve as Lead Investigator (Handler) for assigned escalated cybersecurity incidents
• Coordinate and oversee investigative, containment, eradication, and recovery activities for major cybersecurity events
• Conduct major and micro-hunt investigations to identify malicious activity, assess risk, and improve detection capabilities
• Investigate threats, exploits, vulnerabilities, malware families, and advanced adversary activity across enterprise environments
• Perform advanced host, network, log, cloud, and threat intelligence analysis
• Produce technical reports, after-action reviews, executive summaries, and leadership briefings
• Collaborate with Security Operations, Threat Intelligence, Digital Forensics, Malware Analysis, Engineering, Legal, Privacy, and other stakeholders
• Support development and continuous improvement of incident response playbooks, processes, automation, and investigative methodologies
• Design and facilitate tabletop exercises and cybersecurity incident simulations
• Identify security control gaps and recommend improvements to organizational resilience
• Mentor analysts and investigators across the Incident Response organization
• Provide executive-level communications during significant cybersecurity events
• Support investigations involving endpoint systems, cloud environments, identity platforms, network infrastructure, telecommunications systems, applications, and emerging technologies
• Participate in an on-call rotation supporting critical cybersecurity events

Incident Response Analyst jobs in North Carolina

Principal Cybersecurity – Incident Response Analyst