Technical Consultant - TDR - Incident Handler

As a Technical Consultant: Threat Detection Response & Intelligence, you play a vital role in safeguarding an organization's digital infrastructure by identifying, analyzing, and mitigating cyber threats. This position involves using a variety of cybersecurity tools to monitor, prioritize, investigate, and respond to security incidents. Your primary responsibilities will include:

Lead and execute end-to-end security incident response activities, from detection to containment, eradication, and recovery.

Participate directly in critical security incidents, including ransomware, intrusions, APT activity, and insider threats.

Perform advanced incident investigations using EDR/XDR telemetry, SIEM data, and forensic artifacts.

Conduct digital forensics on endpoints and servers, including memory, disk, and system artifact analysis.

Perform root cause analysis (RCA) and determine the scope and impact of security incidents.

Investigate adversary behavior using MITRE ATT&CK and map TTPs to incident activity.

Correlate logs and security events using SIEM platforms to support investigations.

Coordinate technical response efforts with SOC, IT, Legal, and business teams during incident response and crisis situations.

Develop, maintain, and execute CSIRT playbooks and response procedures.

Produce forensic documentation and post-incident reports, including timelines, impact assessments, and remediation recommendations.