Senior Incident Response Analyst
RemoteFull-time3–5 yrsPosted 3 weeks ago
Mid-level cybersecurity role at ZS Associates. Needs 3–5 years and a B.Tech, B.E. or B.Sc. Remote.
About the role
ZS is a place where passion changes lives. As a management consulting and technology firm focused on improving life and how we live it, we transform ideas into impact by bringing together data, science, technology and human ingenuity to deliver better outcomes for all. Here you’ll work side-by-side with a powerful collective of thinkers and experts shaping life-changing solutions for patients, caregivers and consumers, worldwide.
What you'll do
- Do: Senior Incident Response Analyst in the Enterprise will… Lead end-to-end investigations for complex incidents: validate alert context, determine scope
- Act as an escalation point for high-priority security events and ambiguous cases; guide triage-to-investigation handoffs and ensure defensible conclusions
- Perform endpoint, memory, and cloud forensic triage (e.g., disk and memory captures, system artifacts, cloud audit logs) to reconstruct attacker activity and root cause
- Coordinate containment, eradication, and recovery actions with system owners and partner teams; verify remediation completion and document closure rationale
- Partner with the Senior Incident Response Lead on incident command execution, including stakeholder communications cadence, task tracking
What you need
- Incident response
- Network security
- Vulnerability assessment
- Linux
- EDR
- Cloud security
Good to have
- CISSP
- CISM
- DLP
- AWS
- Azure
- GCP