Senior Incident Response Analyst
- Toronto, ON, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Experience
- 10+ years of cybersecurity experience out of which 2-5 years are experience performing T3 incident response with an emphasis on system compromise analysis.
- Posting language
- English
- Posted
Original job description
Why Join Us?
At Check Point, what you do matters. Every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and AI-driven threats, securing their AI transformation.
Our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and AI systems, stopping attacks before they happen.
This is where innovation meets real-world impact. You’ll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.
We’re proud to be recognized by TIME, Newsweek, and Forbes for excellence and workplace culture.
What really sets Check Point apart is the opportunity to grow, contribute, and help companies navigate their AI transformation securely.
If you’re excited to work at the forefront of AI-driven security on a global scale, this is the place to do it.
Key Responsibilities
At Check Point, what you do matters. Every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and AI-driven threats, securing their AI transformation.
Our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and AI systems, stopping attacks before they happen.
This is where innovation meets real-world impact. You’ll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.
We’re proud to be recognized by TIME, Newsweek, and Forbes for excellence and workplace culture.
What really sets Check Point apart is the opportunity to grow, contribute, and help companies navigate their AI transformation securely.
If you’re excited to work at the forefront of AI-driven security on a global scale, this is the place to do it.
Key Responsibilities
- Responsible for daily incident management of customer incidents
- Perform incident response and forensic analysis of compromised systems, identify and provide recommendations for remediation
- Formulate and direct incident response efforts, prioritize those response efforts, and create legible incident reports that describe the compromise vector, attacker methodologies and artifacts
- Ability to manage complicated global incidents
- Ability to perform large-scale compromise assessments for customer environments
- Build incident response plans and playbooks
- Create attack scenarios for customer tabletop training exercises
- Creation of detailed incident reports for customers and effective communication of findings to customers
- Build and maintain sandbox/test lab environments to evaluate malicious code
- Work within a team environment and will be responsible for coordinating work actions
- This is not an entry level SOC role.
- 10+ years of cybersecurity experience out of which 2-5 years are experience performing T3 incident response with an emphasis on system compromise analysis.
- Experience of performing security reviews/vulnerability risk assessments of network environments using both manual procedures and automated analysis tools.
- Experience with enterprise security solutions, incident crisis management.
- Experience with performing attack simulation for training security teams.
- Experience with creating procedures and documented plans for security teams.
- Ability to participate in on-call rotation, including at least one weekend a month.
- Domestic and International travel may be required.
More about this job
Responsibilities
Manage customer security incidents, conduct forensic analysis and large-scale compromise assessments, and direct response and remediation efforts. Develop response plans, playbooks, and tabletop scenarios; maintain malware analysis environments; and communicate findings through detailed reports while coordinating with the team.
Requirements
Requires 10+ years of cybersecurity experience, including 2–5 years performing T3 incident response focused on system compromise analysis. Candidates should have experience with enterprise security solutions, vulnerability assessments, crisis management, attack simulation, and documented security procedures, and be available for on-call rotation and possible travel.
Skills
- Incident Management
- Incident Response
- Digital Forensics
- System Compromise Analysis
- Remediation Recommendations
- Incident Crisis Management
- Compromise Assessments
- Security Reviews
- Vulnerability Risk Assessments
- Attack Simulation
- Tabletop Exercises
- Incident Response Planning
- Incident Reporting
- Malware Analysis
- Customer Communication
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Customer Service & Support
Keywords
- Cybersecurity
- Incident Response
- T3 Incident Response
- Incident Management
- Digital Forensics
- System Compromise Analysis
- Compromise Vector
- Attacker Methodologies
- Compromise Assessments
- Enterprise Security Solutions
- Security Reviews
- Vulnerability Risk Assessments
- Network Environments
- Automated Analysis Tools
- Incident Crisis Management
- Attack Simulation
- Tabletop Training Exercises
- Incident Response Plans
- Playbooks
- Incident Reports
- Malicious Code
- Sandbox Environments
- On-Call Rotation
- Customer Environments