Incident Response Analyst (Duty)

Requisitos

• Basic indicator of compromise (IoC) analysis skills using publicly available tools (VirusTotal, ANY.RUN, etc.)
• Experience working with Splunk/ClickHouse/SQL at the level of writing simple search queries and interpreting results
• Experience working with SOAR/IRP
• General understanding of current cyber threats and main attack methods
• Basic programming skills in Python, PowerShell, or Bash for automating routine tasks

Desejáveis

• Knowledge of information security best practices (NIST, ISO) and ability to cite them when necessary
• Basic knowledge of Docker and Kubernetes, understanding their monitoring features
• Experience writing correlation rules in SIEM
• Experience with NTA (Network Traffic Analysis) tools
• Experience working with online reputation services (VT, ANY.RUN, AbuseIPDB, etc.)