Chapter 2.6

Tier 2—Incident Responder

Abstract

Whenever there is an information security incident, there must be someone to address the issues that arise. This role is often part of other roles, but at larger organizations, some individuals may be devoted exclusively to incident response. It is common for this role to be done by consultants, as smaller organizations cannot afford to maintain the skills in house. Because of this, those entering this role can expect significant travel to organizations in need of your skills.

Keywords

incident response
information security
careers
forensics
data analysis

Introduction

“Months of boredom punctuated by moments of terror.”

— New York Times

The title of Incident Responder brings to mind images of chemical ...

Get Breaking into Information Security now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.