Senior Cyber Incident Response Analyst

Title: Senior Cyber Incident Response Analyst Location: Italy Salary: Negotiable / DOE Job Role / Responsibilities The Senior Cyber Incident Response Analyst will work within established methodologies to perform a variety of Incident Response related activities for new and existing customers, to include responding to cyber incidents, proactively hunting for adversaries in customer networks, conducting detailed intrusion analysis – host and network, malware reverse engineering, digital forensics, and cyber threat intelligence services. Proactive client services, such as compromise assessments and evaluating and recommending tools and technology for incident response are also in scope. Demonstration of a strong comprehension of malware, emerging threats and adversary TTPs will be critical to success. Desired Skills

Customer focus – ability to work directly with customers and demonstrate services delivered to customers face to face when required. Capacity to multitask on several technical and operational issues simultaneously and a strong understanding of customer issues, with the ability to empathize with customers regarding their current situation. Ability to think through difficult issues and provide advice when necessary. A clear understanding of the ITIL processes. Ability to work on assignments requiring sound judgment in resolving issues or making recommendations. Initiative to drive all incidents to resolution, ensuring timely participation by all stakeholders. Escalate issues to upper management, including C‑Level managers, in accordance with prescribed procedures when required. Incident management and incident communication experience. Experienced in meeting deadlines while following processes and procedures. Capable of working with other teams that challenge processes and procedures. Understanding of ITIL, SANS, PCI DSS, ISO 27001 and ISO 20000. Logical thought mindset and experience developing reusable processes and data architectures. Professional/native Italian and professional English.

Technical Knowledge Requirements

Host intrusion analysis

Windows (endpoint and server) Unix

Network intrusion analysis. Familiarity with categories of malware and malware reverse‑engineering techniques. Experience working with security tools for detection, diagnosis, containment and remediation. Extensive knowledge of Windows server systems. Experience in creating and maintaining a security incident response plan (IRP).

Certifications / Qualifications

SANS: Qualifications in Security Essentials (GSEC), Hacker Techniques & Incident Handling (GCIH), Host (GCFE/GCFA) & Network (GNFA) Forensics, Malware Analysis (GREM), and any digital forensics specializations. CREST certifications: Certified Incident Manager, Certified Host Intrusion Analyst, Certified Network Intrusion Analyst, Certified Malware Reverse Engineer, Practitioner Intrusion Analyst, Registered Intrusion Analyst. Certified Ethical Hacker. A strong team player with a flexible approach. Consistent work attitude.

#J-18808-Ljbffr