Must Have | : Advanced Incident Triage using Defender and Sentinel,Advanced Defender XDR,Advanced KQL,Forensic Analysis,Reverse engineering of malware,Advanced Threat Hunting,Advanced MITRE ATT&CK Framework |
Nice To Have | : CHFI,CCFP |
Additional Skills | : Have at least one of the relevant certifications: SANS GIAC: GCIA, GCFA, GCFE, GREM, GXPN, GMON, or GCIH, ISC2: CCFP, CCSP, CISSP CERT CSIH, EC Council: CHFI or ECSA; Provide expertise in the triage, escalate and respond to potential security events & incidents and provides support to security teams Provide cyber Incident Response expertise and perform Malware Analysis & reverse engineering of malware Analyze various log, network, malware, forensic, and cyber threat intel to validate security threats, recommend appropriate countermeasures, and assess impact of cyber incidents |