Cloud Incident Response (IR) Specialist

Position: Cloud Incident Response (IR) Specialist

Location: Petah Tikva, Israel

Department: Threat-Hunting and IR Team

Reports To: Head of IR and Threat Hunting team

We seek a highly skilled Cloud Incident Response (IR) Specialist to join our dynamic team. The ideal candidate will have extensive experience in incident response within cloud environments, with a deep understanding of cloud platforms such as Microsoft 365, Azure, and AWS.

Key Responsibilities:

Incident Detection and Response:

> Monitor cloud environments for security breaches and incidents.

> Respond to security incidents in real time, identifying root causes and mitigating risks.

> Develop and implement incident response plans and playbooks.

Threat Analysis and Intelligence:

> Conduct forensic analysis and investigate security incidents and breaches.

> Utilize threat intelligence to identify potential threats and vulnerabilities.

> Collaborate with threat intelligence teams to improve incident detection capabilities.

Collaboration and Communication:

> Address security issues by working closely with cross-functional teams.

> Provide clear and concise reports and updates to senior management and stakeholders.

> Conduct training and awareness programs on best practices for cloud security.

Continuous Improvement:

> Stay up-to-date with the latest cloud security trends, tools, and technologies.

> Identify areas for improvement in existing security processes and recommend enhancements.

> Participate in post-incident reviews and contribute to lessons learned.

Qualifications:

Experience:

> Minimum of 1-2 years of experience in incident response and cloud security.

> Minimum of 2-3 years of experience in a SecOps team.

Technical Skills:

> Proficiency in one of the cloud platforms (Microsoft 365, Azure, and AWS) and their security features.

> Experience with security information and event management (SIEM) tools, especially in Microsoft Sentinel.

> Knowledge of forensic tools and techniques for cloud environments.

> Familiarity with scripting languages (Python, PowerShell) for automation.

Soft Skills:

> Strong analytical and problem-solving skills.

> Excellent communication and interpersonal skills.

> Ability to work under pressure and manage multiple incidents simultaneously.

> Strong attention to detail and a proactive approach to security.

What We Offer:

> Competitive salary and benefits package.

> Opportunities for professional growth and development.

> A collaborative and innovative work environment.

> Flexibility to work remotely.

> A team with unique vibes.