Incident Response Analyst

Who are we hiring?

The Information Security—Incident Response Analyst will respond to alerts and work alongside internal and external teams to remediate them. Additionally, this position will focus on Incident Response investigations and remediations. This collaborative role regularly partners with all parts of the business to resolve alerts and remediate security incidents. The ideal candidate is an analytical thinker and a problem solver.

What will you do?

• Responsible for carrying out daily security monitoring and response procedures.
• Perform initial incident assessment, evidence gathering, and triage.
• Escalate incidents and participate in/lead remediation efforts.
• Provide feedback and recommendations for improvement of security controls and response procedures.
• Communicates effectively with peers, partner teams, and management.
• Report weekly metrics to the Information Security Director.
• Collaborate with the Technology, People Practices, and Legal and Business Affairs departments to build a more secure MSG.
• Assist with expanding MDR/SIEM capabilities, including log coverage, alert development, and process improvements.
• Participate in On-Call rotation to remediate alerts/incidents outside regular business hours.
• Assist with managing, analyzing, and remediating phishing emails within our security platform.
• Other information security projects/duties as assigned.

What do you need to succeed?

• Completed 60 credits of college-level coursework (representing 2 years) or have shown similar self-development through certifications, trade school coursework, etc., are preferred.
• 1-2 years of experience in information security and/or digital forensics involving investigating and remediating cyber events.
• Comprehend current cyber security threats such as spear-phishing campaigns, business email compromises, and back-door Trojan malware.
• Has a basic knowledge of Windows, Mac, and Linux operating systems and iOS and Android mobile devices.
• Has a basic knowledge of traditional networking (TCP/IP, DNS, DHCP, etc.) and cloud infrastructure, such as AWS, GCP, and Azure.
• Able to document detailed investigations, remediations, and procedure changes.
• Enjoys thinking analytically and solving problems individually and as a team.
• Possesses a passion for learning all things information security and incident response.

Special Requirements

• Participates in On-Call rotation to ensure security incident response coverage is available 24/7/365
• Possible travel of up to 10% if onsite presence is required at the company’s other locations.

#LI- Onsite