Security Incident Handler

Summary:

Monitor and analyze security alerts and incidents as forwarded from our Security Operations Center. Triage and investigate incidents to closure or escalation to Tier 3 Incident handling team. Respond to security incidents and coordinate with relevant teams to determine the severity of the incident and the threat to the organization that this incident represents. Follow incident response plans and procedures. Conduct post-incident analysis and provide recommendations for future prevention. Work on multiple tasks as required as part of a security team

Responsibilities:

* Monitor and analyze security alerts and incidents that are forwarded from the Security Operations Center.
* Investigate security incidents thoroughly and report findings or escalate as necessary to Tier 3 Incident handling team.
* Coordinate with relevant teams to determine severity of incidents that have been reported and the potential threat to the organization.
* Close out any incidents that do not require further action.
* Conduct post incident analysis and provide recommendations for future prevention.
* Work with AVP of Security Architecture to fine-tune incident response playbooks.
* Collaborate with Outsourced vendors in investigations and follow up of alerts and potential incidents.
* Perform other job-related duties as required as part of a multi-functional security team