General resume template
熊猫简历Incident Response Analyst简历模板，简约、经典、左右结构风格简历模板，支持自定义板块、自定义颜色、AI润色、技能条、荣誉墙、一键更换模板，专业AI辅助一键优化Incident Response Analyst简历内容，仅需5分钟即可拥有一份精美的Incident Response Analyst简历模板，助力你获得「高薪职位」。
Cloud-based editing with real-time save
Formatting stays intact
Best print results
Simple to use and fast to build, with AI optimization
Popular resume picks
More>Junior Data Analyst resume template0 usesIT Support Specialist resume template0 usesSEO專員 resume template0 usesVice President of Research and Development resume template0 usesSenior Fraud Analyst resume template0 usesAvionics Technician resume template0 usesFamily Immigration Paralegal resume template0 usesSoftware Engineer resume template0 usesTax Accountant resume template0 usesSenior Tax Manager resume template0 uses
Leo Panda
Incident Response Analyst
PROFESSIONAL SKILLS
Incident Response & Threat Operations
Incident triageSIEM investigationsEndpoint containmentThreat huntingDigital forensics
Security Tools & Platforms
SplunkMicrosoft SentinelCrowdStrike FalconPalo Alto Cortex XDRServiceNow
Cloud & Network Security
AWS securityAzure securityFirewall logsIDS/IPSWindows event logs
EDUCATION
University of Texas at San Antonio
CybersecurityCAE-CD
Bachelor of Science in Cybersecurity
San Antonio, TXAug 2016 - May 2020
Focused on network defense, incident response, security operations, and digital forensics.
PROFESSIONAL SUMMARY
Incident Response Analyst with 5 years of experience investigating security alerts, containing endpoint threats, and coordinating response actions across enterprise environments. Skilled in Splunk, CrowdStrike, Microsoft Sentinel, and MITRE ATT&CK, with a record of reducing incident dwell time and improving SOC escalation quality.
PROFESSIONAL EXPERIENCE
Lone Star Financial Services
Austin, TX
Financial ServicesEnterprise Security
Incident Response Analyst
Sep 2022 - Present
Incident ResponseThreat Investigation
- Investigated 1,200+ monthly SIEM and EDR alerts, reducing false-positive escalations by 32% through refined correlation logic and triage playbooks.
- Led containment for phishing, malware, and compromised account incidents, cutting average response time from 46 minutes to 24 minutes.
- Performed host and network forensic analysis using CrowdStrike, Splunk, and packet captures to identify root cause and attack scope.
- Partnered with IT, legal, and compliance teams to document incident timelines, evidence, and remediation actions for audit-ready reporting.
- Mapped recurring incidents to MITRE ATT&CK techniques, improving detection coverage for credential access and lateral movement behaviors.
NorthBridge Managed Security
Dallas, TX
MSSPCybersecurity Operations
SOC Analyst
Jun 2020 - Aug 2022
SOC MonitoringSIEM Analysis
- Monitored multi-client security events across Splunk and Microsoft Sentinel, escalating confirmed incidents within SLA for 98% of priority cases.
- Analyzed phishing submissions, suspicious URLs, and attachment payloads, identifying credential harvesting campaigns affecting more than 600 users.
- Created incident tickets with clear severity, indicators, affected assets, and recommended actions, improving analyst handoff quality by 40%.
- Supported after-action reviews by documenting lessons learned, control gaps, and detection tuning opportunities for customer security teams.
CERTIFICATIONS
CompTIA CySA+ - CompTIA
Apr 2024
GIAC Certified Incident Handler - GIAC
Aug 2023
Leo Panda
Incident Response Analyst
PROFESSIONAL SKILLS
Incident Response & Threat Operations
Incident triageSIEM investigationsEndpoint containmentThreat huntingDigital forensics
Security Tools & Platforms
SplunkMicrosoft SentinelCrowdStrike FalconPalo Alto Cortex XDRServiceNow
Cloud & Network Security
AWS securityAzure securityFirewall logsIDS/IPSWindows event logs
EDUCATION
University of Texas at San Antonio
CybersecurityCAE-CD
Bachelor of Science in Cybersecurity
San Antonio, TXAug 2016 - May 2020
Focused on network defense, incident response, security operations, and digital forensics.
PROFESSIONAL SUMMARY
Incident Response Analyst with 5 years of experience investigating security alerts, containing endpoint threats, and coordinating response actions across enterprise environments. Skilled in Splunk, CrowdStrike, Microsoft Sentinel, and MITRE ATT&CK, with a record of reducing incident dwell time and improving SOC escalation quality.
PROFESSIONAL EXPERIENCE
Lone Star Financial Services
Austin, TX
Financial ServicesEnterprise Security
Incident Response Analyst
Sep 2022 - Present
Incident ResponseThreat Investigation
- Investigated 1,200+ monthly SIEM and EDR alerts, reducing false-positive escalations by 32% through refined correlation logic and triage playbooks.
- Led containment for phishing, malware, and compromised account incidents, cutting average response time from 46 minutes to 24 minutes.
- Performed host and network forensic analysis using CrowdStrike, Splunk, and packet captures to identify root cause and attack scope.
- Partnered with IT, legal, and compliance teams to document incident timelines, evidence, and remediation actions for audit-ready reporting.
- Mapped recurring incidents to MITRE ATT&CK techniques, improving detection coverage for credential access and lateral movement behaviors.
NorthBridge Managed Security
Dallas, TX
MSSPCybersecurity Operations
SOC Analyst
Jun 2020 - Aug 2022
SOC MonitoringSIEM Analysis
- Monitored multi-client security events across Splunk and Microsoft Sentinel, escalating confirmed incidents within SLA for 98% of priority cases.
- Analyzed phishing submissions, suspicious URLs, and attachment payloads, identifying credential harvesting campaigns affecting more than 600 users.
- Created incident tickets with clear severity, indicators, affected assets, and recommended actions, improving analyst handoff quality by 40%.
- Supported after-action reviews by documenting lessons learned, control gaps, and detection tuning opportunities for customer security teams.
CERTIFICATIONS
CompTIA CySA+ - CompTIA
Apr 2024
GIAC Certified Incident Handler - GIAC
Aug 2023
More resume templates
See more