Job Description:
Optomi, in partnership with an exciting end client, is seeking a seasoned Cybersecurity Analyst to strengthen incident response capabilities. You will investigate and respond to security incidents, serve as a senior escalation point for the SOC, and back up our Incident Response Lead. Strong CrowdStrike and SIEM skills are the core of the role.
Responsibilities:
- Investigate and respond to security incidents from detection through containment, eradication, and recovery
- Serve as a senior escalation point for the SOC and back up the Incident Response Lead
- Use CrowdStrike for endpoint investigation, threat hunting, and containment
- Use SIEM platforms to search logs, correlate events, and scope incidents
- Respond to incidents in cloud environments, including analysis of cloud and identity logs
- Contribute to incident response playbooks, including cloud and AI-related incident scenarios
- Write clear incident reports and lead post-incident reviews
- Coach junior analysts through investigations
- Identify detection gaps found during incidents and recommend improvements
Qualifications:
- 5+ years of experience in cybersecurity, with strong SOC and incident response experience
- Mid to deep CrowdStrike experience (investigation, containment, and threat hunting)
- Hands-on experience with one or more SIEM platforms
- Proven ability to lead investigations from triage through remediation
- Strong understanding of MITRE ATT&CK and common attack techniques
- Clear written and verbal communication, including incident updates to leadership
