Incident Response Analyst

Why Join Us?

As the world’s leading vendor of Cyber Security, facing the most sophisticated threats and attacks, we’ve assembled a global team of the most driven, creative, and innovative people. At Check Point, our employees are redefining the security landscape by meeting our customers’ real-time needs and providing our cutting-edge technologies and services to an ever-growing customer base.

Key Responsibilities

• Responsible for daily incident management of customer incidents

• Perform incident response and forensic analysis of compromised systems, identify and provide recommendations for remediation

• Formulate and direct incident response efforts, prioritize those response efforts, and create legible incident reports that describe the compromise vector, attacker methodologies and artifacts

• Ability to manage complicated global incidents

• Ability to perform large-scale compromise assessments for customer environments

• Build incident response plans and playbooks

• Create attack scenarios for customer tabletop training exercises

• Creation of detailed incident reports for customers and effective communication of findings to customers

• Build and maintain sandbox/test lab environments to evaluate malicious code

• Work within a team environment and will be responsible for coordinating work actions

Qualifications

• 10+ years of cybersecurity experience out of which 2-5 years are experience performing incident response with an emphasis on system compromise analysis.

• Experience of performing security reviews/vulnerability risk assessments of network environments using both manual procedures and automated analysis tools.

• Experience with enterprise security solutions, incident crisis management.

• Experience with performing attack simulation for training security teams.

• Experience with creating procedures and documented plans for security teams.

• Ability to participate in on-call rotation, including at least one weekend a month.

• Domestic and International travel may be required.