Cyber Incident Handling Analyst

• Monitor intrusion detection and security information management systems for malicious or anomalous activity.
• Triage and evaluate security events to determine whether an incident occurred.
• Analyze logs, packet captures, and related enterprise data to support incident conclusions.
• Coordinate incident response and document incidents from initial detection through final resolution

Required Education / Experience Bachelor of Science/Arts degree in Engineering, Computer Science, Science, Business Administration, or Mathematics plus three (3) years of specialized experience; or an Associate's degree plus seven (7) years of specialized experience; or a major certification plus seven (7) years of specialized experience; or eleven (11) years of specialized experience.

Required Specialized Certification At least one of the following: Cisco CyberOps Professional; SANS certification (any); Microsoft Certified: Security Operations Analyst Associate; Blue Team Level 1; OSDA.

Required Specialized Experience Experience monitoring intrusion detection and security information management systems; triaging and evaluating detected events; analyzing logs and packet captures; coordinating incident response with technical and non-technical parties; understanding hacker TTPs and exploits; and documenting incidents from initial detection through final resolution