Summary:
Monitor and analyze security alerts and incidents as forwarded from our Security Operations Center. Triage and investigate incidents to closure or escalation to Tier 3 Incident handling team. Respond to security incidents and coordinate with relevant teams to determine the severity of the incident and the threat to the organization that this incident represents. Follow incident response plans and procedures. Conduct post‐incident analysis and provide recommendations for future prevention. Work on multiple tasks as required as part of a security team
Responsibilities:
• Monitor and analyze security alerts and incidents that are forwarded from the Security Operations Center.
• Investigate security incidents thoroughly and report findings or escalate as necessary to Tier 3 Incident handling team.
• Coordinate with relevant teams to determine severity of incidents that have been reported and the potential threat to the organization.
• Close out any incidents that do not require further action.
• Conduct post incident analysis and provide recommendations for future prevention.
• Work with AVP of Security Architecture to fine‐tune incident response playbooks.
• Collaborate with Outsourced vendors in investigations and follow up of alerts and potential incidents.
• Perform other job‐related duties as required as part of a multi‐functional security team
Qualifications:
• Bachelor’s Degree in Computer Science or related certificate in a security related program from an accredited institution
• GIAC Incident Certification, or must obtain it within one year of hire date as a condition of continued employment
• 3 – 5+ years of relevant, professional work experience required
• Job training or college experience in a Security Related discipline required
• Military/law enforcement experience may be considered in lieu of work experience required
• Additional experience and/or specialized training may be considered in lieu of degree requirements required
• Experience working with teams in a collaborative setting required
• Proficiency with Windows, Firewall and Service log interpretation required
• End User Computing and Data Network Operations knowledge preferred
• Excellent communication skills (verbal, written, presentation, interpersonal) with all audiences required
• Ability to digest information quickly and convey critical summarizations required
• Ability and willingness to perform independent research on IT security related matters required
• Ability to work calmly and effectively in a high‐pressure environment required