Incident Response Analyst

Respond to computer security incidents according to the incident response policy and other policies and procedures; triage and assess the risk of incidents, performing real-time analysis and managing workload during investigations/incidents.
Serve as an escalation contact for incidents reported by managed detection and response service or internal teams.
Engage other company resources as needed to resolve incidents; provide technical guidance to other responders in handling information security incidents.
Provide timely and relevant updates to appropriate stakeholders and decision makers.
Validate and maintain incident response plans and processes to address potential threats.
Compile and analyze data for management reporting and metrics.
Monitor relevant threat intelligence and other information sources to stay up to date on current attacks and trends and potential defensive measures; analyze potential impact of new threats and communicates risks to leadership and other teams.
Perform root-cause analysis to document findings, and participate in root-cause elimination activities as required; communicate findings to relevant teams to help improve information security posture.
Participate in incident review meetings with organization leadership.
Ensure appropriate coverage of monitoring solutions by performing updates, adding new data sources, adjusting logging levels, and recommending necessary changes for key detection solutions.
Create playbooks for frequently occurring incidents to assist with rapid recovery or automation of response actions.
Recommend activation of incident response plan if needed; may serve as an incident commander or as a backup.
Maintain, manage, and monitor compliance with security control frameworks such as NIST, PCI and other state, federal, and international laws.
Monitor the capabilities and performance of security solutions and partner with suppliers to correct issues promptly.
Resolve problem tickets promptly with closed-loop engagement with internal or external customers.
Identify opportunities to engage global resources in security response and maintenance; train new team members or project assignees as appropriate.
Participate in the design, development, and delivery of security training and awareness programs, including phishing simulations, awareness articles, and training classes.
Other duties as assigned.