eir seeks an SOC Incident Analyst to own security incidents from acceptance through investigation, scope, containment guidance and closure. The role provides the primary interface between SOC triage and advanced incident response. You will interface with SOC triage and advanced incident response, build attack timelines, map activity to MITRE ATT&CK, and coordinate with customers while contributing to playbooks and detection improvements.
Experience: 2 years required