Note: The job is a remote job and is open to candidates in USA. MDAEdge is recruiting an Incident Response Analyst to strengthen enterprise cybersecurity through incident resolution, preventative security measures, and defensive posture improvements. The role executes response plans, triages alerts, investigates intrusions, coordinates remediation with stakeholders, and supports compliance and security standards in a remote U.S.-based environment.
Responsibilities
- Resolve security incidents and recommend improvements to strengthen enterprise security
- Execute incident response plans and contribute to scalable preventative security measures
- Identify attack patterns and enhance the organization's defensive posture
- Collaborate with business units on remediation plans and present insights to senior leadership
- Review production systems and network configurations to ensure compliance with security standards
- Prepare and manage prevention and resolution processes for security breaches
- Implement audit schedules, review access authorizations, and perform access control testing
- Develop automated scripts and contingency plans triggered during detected cyberattacks
- Coordinate with Information Security Architects, Engineers, and infrastructure stakeholders
- Manage prioritized alert notifications, escalation trees, and triage of security alerts
- Integrate third-party threat monitoring and reporting systems with internal communications tools
- Conduct post-incident analyses using logs and traffic data to identify intrusions or policy violations
- Ensure adherence to all information security policies and standards
Skills
- Bachelor's degree in computer science, engineering, mathematics, statistics, or a related field
- 4–6 years of professional cybersecurity experience
- Equivalent experience considered based on proven skill and accomplishments
- 4–6 years of cloud cybersecurity experience focused on incident triage and response
- Hands-on experience with AWS and Azure environments
- Strong understanding of threat actor tools, tactics, and processes (TTPs)
- Knowledge of Indicators of Compromise (IOC)
- Expertise in endpoint protection and enterprise detection tools (e.g., CrowdStrike, MS Defender)
- Solid understanding of network infrastructure (routers, switches, firewalls)
- Analytical mindset with strong problem-solving abilities
- Ability to manage projects and work independently
- Strong accuracy, judgment, and decision-making under pressure
- Clear communication and presentation capabilities
- Experience with Wiz and Wiz Defend preferred
- SANS GIAC Security Essentials (GSEC), GIAC Certified Intrusion Analyst (GCIA), or GIAC Certified Incident Handler (GCIH)
- Healthcare industry exposure (helpful but not required)
Benefits
- Base + 8% annual bonus (performance-based)
- Remote work (U.S.-based)
Company Overview