Incident Response Analyst

About the Company

As a global leader in cybersecurity, Check Point Software assembles a diverse team renowned for innovation and dedication, working to counter the most advanced cyber threats. Recognized by Time Magazine as one of the World's Best Companies and by Newsweek among America's Best Cybersecurity Companies, Check Point also ranks repeatedly on Forbes' list of the World's Best Places to Work and is celebrated as a top female-friendly employer. Joining Check Point means contributing to a safer digital world within an award-winning corporate culture.

Role Overview

The Incident Response Analyst plays a key role in managing daily customer-related incidents, conducting thorough forensic analyses to detect system compromises, and advising on corrective measures. The position requires leading incident response initiatives, prioritizing tasks effectively, and providing clear reports detailing attack vectors and methodologies. Expertise in handling complex global incidents and conducting expansive compromise assessments is essential.

Primary Responsibilities

• Manage daily incident responses for customer security breaches.
• Conduct forensic investigations to identify compromised systems and recommend solutions.
• Develop and lead incident response strategies and prioritize response activities.
• Draft comprehensive incident reports outlining compromise methods and attacker techniques.
• Oversee complex, large-scale global incident management.
• Perform extensive compromise evaluations across customer environments.
• Create detailed incident response plans and playbooks.
• Design attack simulation scenarios for tabletop training exercises with customers.
• Prepare precise incident documentation and convey findings effectively to clients.
• Maintain sandbox and test lab environments to analyze malicious software samples.
• Collaborate in a team setting and coordinate project tasks.

Qualifications and Requirements

• This role requires significant expertise; it is not suitable for entry-level SOC professionals.
• A minimum of 10 years' experience in cybersecurity, with 2-5 years specifically in Tier 3 incident response focusing on system compromise analysis.
• Proficiency in conducting security assessments and vulnerability evaluations using both manual techniques and automated tools.
• Strong background with enterprise security technologies and managing crisis response scenarios.
• Experience in designing attack simulations to train security teams effectively.
• Capability to develop and document procedural guidelines and plans for security operations teams.
• Willingness to participate in an on-call rotation that includes weekends at least once per month.
• Availability for domestic and international travel as required.
• Must have legal authorization to work in the United States without current or future employer sponsorship.

Additional Information

Check Point Software is an Equal Opportunity Employer welcoming applications from all qualified individuals including minorities, females, veterans, and persons with disabilities.