Incident Response Analyst

Fulcrum Technology Solutions are helping a client that is looking for an experienced Incident Response Analyst to strengthen its cybersecurity incident response program. This role combines hands-on incident response with strategic planning, helping the organization prepare for and effectively respond to cybersecurity incidents. The ideal candidate has experience investigating security incidents, building response playbooks, and participating in tabletop exercises.

This person MUST be located in Texas. It is REMOTE TEXAS.

Responsibilities

• Lead and support the investigation, containment, eradication, and recovery of cybersecurity incidents.
• Develop, maintain, and improve incident response plans, procedures, and playbooks.
• Coordinate and participate in quarterly tabletop exercises to validate response readiness.
• Partner with security and IT teams to improve organizational preparedness for major security incidents.
• Perform forensic analysis and evidence collection during incident investigations.
• Analyze attack techniques and map findings to the MITRE ATT&CK Framework.
• Document incidents, root cause findings, and lessons learned.
• Recommend improvements to strengthen incident response capabilities and reduce future risk.

• Required Qualifications
• 5+ years of cybersecurity experience with a focus on incident response.
• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Experience leading or supporting cybersecurity incident investigations.
• Strong understanding of incident response methodologies and best practices.
• Experience developing incident response documentation, playbooks, and procedures.
• Knowledge of digital forensics, evidence preservation, and forensic imaging.
• Familiarity with the MITRE ATT&CK Framework.
• Strong communication, analytical, and problem-solving skills.

• Preferred Qualifications
• Experience with CrowdStrike Falcon and/or CrowdStrike Next-Gen SIEM.
• Experience conducting or participating in cybersecurity tabletop exercises.
• Industry certifications such as GCIH, GCFA, GCFE, Security+, CySA+, CISSP, or equivalent.