Incident Response Analyst

• Independently lead the technical response to high-severity and critical cybersecurity incidents
• Confirm attack scope, compromise level, attack vector, business impact and required response actions
• Perform advanced analysis of endpoint, network, identity, application and cloud telemetry
• Reconstruct attack paths and prepare detailed incident timelines
• Conduct threat hunting based on indicators of compromise, attacker behaviours, tactics, techniques and procedures
• Design, recommend and oversee containment and eradication activities
• Analyse malware, scripts, processes, persistence mechanisms, lateral movement and privilege escalation
• Perform root cause analysis and define measures to prevent recurrence
• Assess risks associated with restoring systems and services
• Support network segmentation, account and credential resets, system rebuilds, backup restoration and service recovery decisions
• Act as technical lead during major cybersecurity incidents
• Mentor Junior Incident Response Analysts
• Develop, test and improve incident response playbooks
• Prepare technical sections of post-incident reports and participate in post-incident reviews
• Use AI-agent-supported solutions for data analysis, recommendation development and solution design

Explore Senior Incident Response Analyst at EY. Review requirements and application details.