Leadership

Job Description:
Optomi, in partnership with an exciting end client, is seeking a seasoned Cybersecurity Analyst to strengthen incident response capabilities. You will investigate and respond to security incidents, serve as a senior escalation point for the SOC, and back up our Incident Response Lead. Strong CrowdStrike and SIEM skills are the core of the role.

Responsibilities:

• Investigate and respond to security incidents from detection through containment, eradication, and recovery
• Serve as a senior escalation point for the SOC and back up the Incident Response Lead
• Use CrowdStrike for endpoint investigation, threat hunting, and containment
• Use SIEM platforms to search logs, correlate events, and scope incidents
• Respond to incidents in cloud environments, including analysis of cloud and identity logs
• Contribute to incident response playbooks, including cloud and AI-related incident scenarios
• Write clear incident reports and lead post-incident reviews
• Coach junior analysts through investigations
• Identify detection gaps found during incidents and recommend improvements

Qualifications:

• 5+ years of experience in cybersecurity, with strong SOC and incident response experience
• Mid to deep CrowdStrike experience (investigation, containment, and threat hunting)
• Hands-on experience with one or more SIEM platforms
• Proven ability to lead investigations from triage through remediation
• Strong understanding of MITRE ATT&CK and common attack techniques
• Clear written and verbal communication, including incident updates to leadership