litit · ID #3bg8v, Vilniaus apskritis, Lithuania
Skills: Python
ABOUT THE COMPANY LITIT, a joint venture between NTT DATA and Reiz Tech, is a company with deep-rooted industry know-how, dedicated to innovation within the IT sector. Its primary focus is delivering high-quality solutions in the DACH region. With a commitment to excellence, LITIT combines the best of German precision, Japanese work ethics, and Lithuanian talent to provide unparalleled IT service and support to its clients. ABOUT THE ROLE As a Cyber Security Incident Response Analyst, you will be responsible for detecting, investigating, and responding to cyber security incidents across enterprise environments. You will work across the full incident lifecycle — from initial alert and triage through investigation, containment, recovery, and post-incident review. The role has a strong focus on the Microsoft security ecosystem, including Microsoft Sentinel, Defender XDR, Defender for Endpoint, Microsoft Entra ID, Microsoft 365, and Azure. You will also work closely with Cloud, Infrastructure, IAM, Risk, Compliance, and other technical teams to coordinate incident response activities and continuously improve security detection and response capabilities. RESPONSIBILITIES Monitor and investigate security alerts using Microsoft Sentinel and Microsoft Defender technologies. Triage incidents and determine severity, scope, impact, and required response actions. Investigate phishing, malware, compromised accounts, suspicious authentication, data loss, and unauthorised access. Perform endpoint, identity, Microsoft 365, Azure, email, and network investigations. Collect and analyse security logs, endpoint artefacts, authentication data, and network telemetry. Identify indicators of compromise (IOCs) and attacker techniques. Map attacker activity to MITRE ATT&CK where relevant. Coordinate containment, eradication, and recovery activities with technical teams. Perform threat hunting based on observed attacker behaviour and threat intelligence. Develop and tune Microsoft Sentinel qu…
Sign in to see the original posting
Browse more developer jobs on RoleBurst