Назад
Company hidden
8 дней назад

Incident Response Analyst (Cybersecurity)

Формат работы
remote (только Australia)
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
Australia
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Incident Response Analyst (Cybersecurity): Investigating, containing, and responding to malware, ransomware, and other cyber incidents for MDR customers with an accent on endpoint and network forensics, threat analysis, and precise incident documentation. Focus on validating investigative findings, codifying attacker tactics, improving detection logic with security teams, and preparing technical reports under high-pressure conditions.

Location: Australia; remote. Legal authorization to work in Australia is required, and employer sponsorship is not available.

Company

hirify.global provides cybersecurity solutions, including Managed Detection and Response services for customers.

What you will do

  • Investigate, contain, and respond to cyber incidents using hirify.global technologies.
  • Analyze malware, ransomware, and other common attack types across customer environments.
  • Document investigative work and prepare technical incident reports for MDR customers and MSPs.
  • Identify attacker tools, tactics, and procedures for use in investigations and detection tooling.
  • Communicate clearly with customers during incidents and provide response and remediation guidance.
  • Collaborate with hirify.globalLabs, Detection Engineering, Threat Hunting, and MDR Operations teams to improve detection logic and customer response.

Requirements

  • 3+ years of experience conducting cybersecurity investigations and threat analysis.
  • Knowledge of incident response tools, methodologies, and techniques.
  • Experience with technical documentation and reporting.
  • Network and endpoint investigations across macOS, Linux, and Windows, including IDS, IPS, EDR, and basic malware analysis.
  • Basic knowledge of at least one of OSQuery, SQL, or KQL, plus MITRE ATT&CK and Cyber Kill Chain frameworks.
  • Ability to work under high pressure, use Windows and Linux command or script interpreters, and work some weekends and holidays.

Nice to have

  • Cybersecurity certifications such as GCIH, CompTIA Security+, or eJPT.
  • Additional experience handling malware and performing containment or threat-neutralization actions.
  • Experience speaking with customers and providing customer service.

Culture & Benefits

  • Remote-first work environment.
  • Permanent employment.
  • Work supporting Managed Detection and Response customers within a Critical Incident Response Unit.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →