Cybersecurity Incident Responder Job at NTT DATA (Fort Bragg)

Job Description

We are currently seeking a Cybersecurity Incident Responder to join our team in Fort Bragg, North Carolina (US-NC), United States (US).

Detecting, analyzing, containing, eradicating, and recovering from cybersecurity incidents across enterprise, endpoint, network, and cloud environments
Conducting investigations and responding to cybersecurity alerts and confirmed incidents across enterprise networks and cloud platforms such as AWS, Microsoft Azure, and Google Cloud
Executing containment actions on compromised systems or accounts
Supporting eradication and recovery efforts
Documenting all response activities through incident closure
Analyzing malware infections and responding to indicators of ransomware, trojans, spyware, and unauthorized software
Coordinating host containment and remediation actions such as antivirus or EDR scanning, reimaging, and evidence preservation
Managing spillage and data-loss events by containing and sanitizing affected systems
Coordinating reporting and remediation
Supporting insider-threat or data-exfiltration investigations
Conducting continuous monitoring by reviewing SIEM alerts, logs, endpoint notifications, and user reports
Creating accurate incident tickets, detailed timelines, after-action reports, maintaining evidence and chain-of-custody records
Briefing leadership or management as needed

Minimum 7 years' of professional experience
Minimum 4 years' of experience in cybersecurity, help desk, system administration, SOC, or IR
Minimum 1 year of experience in Incident Response lifecycle (Preparation, Identification, Containment, Eradication, Recovery, Lessons Learned)
Minimum 1 year of experience in Email phishing investigations
Minimum 1 year of experience with one or more: Splunk and Elastic for Cloud, Endpoint Detection & Response (EDR) tools, Antivirus platforms, Vulnerability scanners (ACAS), ServiceNow, Remedy or similar ticketing systems
DoD 8570/8140 certification: CompTIA Security+ CE
Top Secret Security Clearance, SCI eligible