Looking for 3 years of Experience:

Perform advanced incident response across Windows and Linux environments, including triage, containment, eradication, and recover

y.Conduct host-based forensics, including log analysis, memory capture, file system review, and malware behavior analysi
s.Serve as Incident Commander during cybersecurity events, coordinating actions, documenting decisions, and communicating with leadership and affected agencie
s.Analyze adversary Tactics, Techniques, and Procedures (TTPs) and map findings to MITRE ATT&C
K.Review and validate alerts from SIEM, IDS/IPS, EDR, and network monitoring tool
s.Produce incident reports, timelines, and executive summaries for statewide stakeholder
s.Support multi-agency response operations, including SLTT partners and critical infrastructure entitie
s.Provide recommendations for detection improvements, hardening, and long-term mitigatio
n.Participate in post-incident reviews, lessons learned, and playbook update
s.Maintain readiness for 24x7 response through on-call rotation or surge suppor

t.
Advanced host-based forensics across Windows and Linux, including memory, disk, and malware analysis, using telemetry from NetWitness, Gravwell, Google SecOps, and Corelight to validate findings and reconstruct attacker activi
ty.Ability to correlate host, network, and intelligence data from CrowdStrike, SentinelOne, Microsoft Sentinel, Corelight, and NetWitness to build complete incident timelin
es.Experience producing high-quality incident reports and executive summaries using evidence collected from Gravwell, NetWitness, Corelight, and case management workflo
ws.Strong understanding of adversary TTPs, intrusion kill chains, and threat hunting methodologies using packet-level and log-level data from technologies including (but not limited to) Corelight, NetWitness, and CRIBL pipelin
es.Incident Commander experien
ce.Experience supporting SLTT or critical infrastructure environments, including multi-tenant incident response operations and cross-agency coordinati

on.

Intracruit Solutions jobs

Never Miss a New Opportunity