Cyber Incident Response Lead

Job Description

As a Cyber Incident Response Lead at Owens & Minor Halyard Health, you will be responsible for investigating and responding to cyber threats in the night shift (5:00 PM to 2:00 AM) based in India. Your primary job functions will include:- Reviewing security alerts escalated by SOC analysts to determine incident severity- Investigating incidents to assess scope and impact- Taking necessary steps to contain and remediate cybersecurity incidents- Recording incident details, artifacts, and evidence in the incident tracking system- Executing response protocols and playbooks to address incidents- Escalating incident response protocols to senior staff when required- Communicating with end users to gather information and resolve issues- Collaborating with IT, Legal, and HR teams during the incident response processAdditionally, you may perform the following supplemental job functions:- Performing additional duties as directed- Achieving set goals while primarily working remotely- Being available on an on-call basis for off-hours critical incident responseQualifications:Education & Experience:- 7 years of experience in cyber incident response and investigations- 5 years of experience in analyzing email headers and contents- 3 years of experience in malware investigation and offline malware analysis techniques- 2 years of experience in leading cybersecurity incident investigation and responseKnowledge Skills & Abilities:- Strong understanding of SIEM log analysis and queries- Strong understanding of Endpoint Detection and Response (EDR) capabilities and behavior- Strong understanding of network protocols such as TCP/IP, DNS, HTTP, TLS, SMB, CIFS, SMTP, and network traffic analysis- Strong understanding of techniques to investigate phishing, credential theft, ransomware, botnets, and denial of service attacks- Strong analytical and critical observation skills- Understanding of the MITRE framework and cyber incident recovery methodology- Ability to work in a fast-paced environment with minimal supervision- Ability to create documentation and presentations for peers and managementDesired Certifications:- GIAC Certified Incident Handler (GCIH)- GIAC Certified Forensic Analyst (GCFA)- GIAC Network Forensic Analyst (GNFA)- GIAC Cloud Forensics Responder (GCFR)- GIAC Enterprise Incident Response (GEIR)Please note the seniority level for this position is not applicable, and it is a full-time role within the industries of Hospitals and Health Care, Transportation, Logistics, Supply Chain and Storage, and Warehousing and Storage. As a Cyber Incident Response Lead at Owens & Minor Halyard Health, you will be responsible for investigating and responding to cyber threats in the night shift (5:00 PM to 2:00 AM) based in India. Your primary job functions will include:- Reviewing security alerts escalated by SOC analysts to determine incident severity- Investigating incidents to assess scope and impact- Taking necessary steps to contain and remediate cybersecurity incidents- Recording incident details, artifacts, and evidence in the incident tracking system- Executing response protocols and playbooks to address incidents- Escalating incident response protocols to senior staff when required- Communicating with end users to gather information and resolve issues- Collaborating with IT, Legal, and HR teams during the incident response processAdditionally, you may perform the following supplemental job functions:- Performing additional duties as directed- Achieving set goals while primarily working remotely- Being available on an on-call basis for off-hours critical incident responseQualifications:Education & Experience:- 7 years of experience in cyber incident response and investigations- 5 years of experience in analyzing email headers and contents- 3 years of experience in malware investigation and offline malware analysis techniques- 2 years of experience in leading cybersecurity incident investigation and responseKnowledge Skills & Abilities:- Strong understanding of SIEM log analysis and queries- Strong understanding of Endpoint Detection and Response (EDR) capabilities and behavior- Strong understanding of network protocols such as TCP/IP, DNS, HTTP, TLS, SMB, CIFS, SMTP, and network traffic analysis- Strong understanding of techniques to investigate phishing, credential theft, ransomware, botnets, and denial of service attacks- Strong analytical and critical observation skills- Understanding of the MITRE framework and cyber incident recovery methodology- Ability to work in a fast-paced environment with minimal supervision- Ability to create documentation and presentations for peers and managementDesired Certifications:- GIAC Certified Incident Handler (GCIH)- GIAC Certified Forensic Analyst (GCFA)- GIAC Network Forensic Analyst (GNFA)- GIAC Cloud Forensics Responder (GCFR)- GIAC Enterprise Incident Response (GEIR)Please note the seniority level fo

Keyskills :
network traffic analysisSIEM log analysisEndpoint DetectionResponse EDRnetwork protocolsphishing investigationcredential theft investigationransomware investigationbotnets investigationdenial of service attacks investigationMITRE frameworkcyber