Cybersecurity Incident Response Specialist Job at The Brattle Group in Boston

Cybersecurity Incident Response Specialist The Brattle Group is seeking a Cybersecurity Incident Response Specialist to join our Boston, MA office. The Cyber Security Incident Response Specialist is responsible for identifying, containing, and mitigating cybersecurity incidents that impact the firm’s infrastructure, systems, or data. Reporting to the Manager of Cybersecurity, the IRS leads real-time response efforts and proactively improves detection and containment capabilities. Responsibilities Monitor SIEM and other security tools for abnormal activity and triage alerts in real time Lead investigation and containment of security incidents involving malware, phishing, data leakage, unauthorized access, and system compromise Perform forensic analysis on compromised endpoints and servers to identify root causes and indicators of compromise (IOCs) Develop, refine, and implement incident response playbooks for different threat scenarios Provide detailed documentation and post-incident reporting, including lessons learned and remediation strategies Coordinate with IT and Legal teams on incident disclosure and evidence preservation Continuously evaluate incident response tools and techniques for improvement Participate in threat-hunting activities and red/blue team exercises Perform regular tabletop exercises (TTX) to test the firm’s ability to respond to cybersecurity incidents Maintain thorough documentation of incident response procedures and timelines Assist with updates to business continuity and disaster recovery plans as they relate to cybersecurity events Support audit and compliance requirements by maintaining evidence of security incidents and actions taken Qualifications BSc in Cybersecurity, Information Systems, Computer Science, or equivalent experience 3–5 years of experience in cybersecurity operations with a strong focus on incident response Familiarity with tools like CrowdStrike, SentinelOne, Splunk, Wireshark, or equivalent Understanding of MITRE ATT&CK framework, malware analysis, and digital forensics Familiarity with Windows and Linux operating systems, PowerShell scripting, and packet analysis Relevant certifications such as GCIH, GCFA, CEH, or CISSP Experience in regulated industries (e.g., finance, healthcare, legal) Familiarity with ISO 27001, NIST SP800-53, and SOC 2 incident handling Salary and Benefits : Brattle offers a competitive benefits package and base salary. The anticipated base gross salary range for this position in Boston, MA is $105,000–$115,000 annually. Actual salary depends on experience and training. Note: This position is not eligible for immigration sponsorship. THE EMPLOYER The Brattle Group answers complex economic, finance, and regulatory questions for corporations, law firms, and governments around the world. Brattle has 500+ professionals across North America, Europe, and Asia-Pacific. For more information, please visit brattle.com. EQUAL OPPORTUNITY The Brattle Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, citizenship status, national origin, ancestry, sex, gender identity and expression, age, disability, or other protected characteristics as required by law. We encourage all applicants to review our full Equal Employer Opportunity Statement at our site. #J-18808-Ljbffr