Cyber Security Analyst (IR)

Job Description:

Optomi, in partnership with an exciting end client, is seeking a seasoned Cybersecurity Analyst to strengthen incident response capabilities. You will investigate and respond to security incidents, serve as a senior escalation point for the SOC, and back up our Incident Response Lead. Strong CrowdStrike and SIEM skills are the core of the role.

Responsibilities:

Investigate and respond to security incidents from detection through containment, eradication, and recovery

Serve as a senior escalation point for the SOC and back up the Incident Response Lead

Use CrowdStrike for endpoint investigation, threat hunting, and containment

Use SIEM platforms to search logs, correlate events, and scope incidents

Respond to incidents in cloud environments, including analysis of cloud and identity logs

Contribute to incident response playbooks, including cloud and AI-related incident scenarios

Write clear incident reports and lead post-incident reviews

Coach junior analysts through investigations

Identify detection gaps found during incidents and recommend improvements

Qualifications:

5+ years of experience in cybersecurity, with strong SOC and incident response experience

Mid to deep CrowdStrike experience (investigation, containment, and threat hunting)

Hands-on experience with one or more SIEM platforms

Proven ability to lead investigations from triage through remediation

Strong understanding of MITRE ATT&CK and common attack techniques

Clear written and verbal communication, including incident updates to leadership