Incident Response Analyst

The Incident Response Analyst position is responsible for detecting, investigating, and assessing cybersecurity threats and incidents across the Elbit Systems environment The Incident Response Analyst works among a team with skilled members to address complex and challenging security issues and crises as needed within the Digital Forensics and Incident Response environment

 

Responsibilities

As an incident response analyst, the responsibility is to be part of a growing DFIR team who needs to provide responses to every security incident across the Elbit Systems environment

: Below are the responsibilities points

Provide expertise in incident response, forensic and 

malware analysis

Develop, document, and implement runbooks,

 capabilities, and techniques for IR

Perform analysis on workstations, servers, and network infrastructure.

Identify and analyze malware using live forensics, hard drive forensics, sandboxes, and reverse engineering

Identify indicators of compromise and apply them to the incident response process

Perform activities necessary for immediate containment and short-term resolution of incidents

Maintain current knowledge and understanding of the threat landscape, emerging security threats, and vulnerabilities

Coordinate and drive efforts during response activities and post-mortem

Participate in after-hours on-call when required

Determine the root cause of complex information security incidents

Recognize and codify attacker tools, tactics, and procedures (TTPs) in indicators of compromise (IOCs) that can be applied to current and future investigations