Incident Response Analyst

We are looking for a dynamic and detail-oriented Command Center Incident Response Engineer to join our 24x7 Security Operations team. The ideal candidate will have hands-on experience in incident response, network security administration, and Wintel (Windows + Intel) security operations at an L2 level. This role is critical in ensuring real-time monitoring, triage, and resolution of security incidents across enterprise environments.

Key Responsibilities:

• Operate within a 24x7 Command Center environment to monitor and respond to security alerts and incidents.
• Perform L2 triage and analysis of security events using SIEM, EDR, and other monitoring tools.
• Escalate and coordinate with L3 teams for complex incidents and threat containment.
• Administer and troubleshoot Windows Server environments, Active Directory, and related services.
• Support network security operations including firewall rule reviews, VPN troubleshooting, and IDS/IPS monitoring.
• Maintain incident response documentation, shift handover reports, and playbooks.
• Collaborate with IT infrastructure teams to ensure timely patching and vulnerability remediation.
• Participate in periodic threat hunting and proactive security assessments.
• Ensure compliance with internal security policies and external regulatory requirements.

Required Skills & Qualifications:

• 35 years of experience in a Security Operations Center (SOC) or Command Center environment.
• Strong understanding of Windows Server administration (L2 level) including AD, GPO, DNS, DHCP.
• Hands-on experience with network security tools and concepts (firewalls, proxies, IDS/IPS, VPNs).
• Proficiency with SIEM platforms (e.g., Splunk, QRadar, Sentinel) and EDR solutions.
• Familiarity with incident response frameworks (e.g., NIST, SANS).
• Ability to analyze logs, network traffic, and endpoint data to identify and respond to threats.
• Strong communication skills and ability to work in a high-pressure, fast-paced environment.

Preferred Certifications:

• Security+
• CEH
• Microsoft Certified: Security Operations Analyst Associate
• ITIL Foundation
• CCNA Security
• MCSA: Windows Server