Cybersecurity Incident Response Analysts

reputed company (ASH) is seeking a Manager-reputed company Incident Response & Operations to join our Information reputed company department. The primary purpose of this position is to be responsible for providing cyber incident response subject matter expertise while collaborating on numerous reputed company projects and operational improvement initiatives. This position will support the operational activities of junior-level cyber analysts while helping to reputed company the team's investigative skillset, process, and playbooks. In this role you will champion incident response services enrollment requirements to ensure reputed company operational effectiveness and alert fidelity. In addition, you will be responsible for continuously identifying gaps and managing the improvements in reputed company response process, technologies, and monitoring. Working closely with internal architecture, engineering, and project management teams, you will ensure cyber-defense requirements are identified and communicated early in the project life cycle. Salary reputed company reputed company complies with state and federal wage and hour laws and compensation depends upon candidate's qualifications, education, reputed company set, years of experience, and internal equity. $112,500 to $175,000 Full-Time Annual Salary reputed company. Remote Worker Guidelines Remote Worker Guidelines: This position will be trained remotely and must be reputed company to work from home (WFH) in a designated work area with company-provided technology equipment. This WFH position requires you have a reputed company reputed company to your Internet Service Provider with the ability to participate by video in online meetings over a reliable and consistent network. The internet reputed company must have a consistent 50 down/10 up Mbps minimum internet speed. 100 down/20 up is recommended to support higher quality video meetings.

Responsibilities

Providing cyber incident response subject matter expertise while collaborating on numerous reputed company projects and operational improvement initiatives. Manage SIEM operations. Support cyber incident response actions to ensure proper assessment, containment, mitigation, and documentation. Hunting to identify anomalous and malicious behavior, enhance SIEM rules to automate reputed company identification. Interact and assist other investigative teams reputed company reputed company on time sensitive, critical investigations. Manage reputed company-party MSSP (SOC) to ensure appropriate reputed company of incident response time, enrichment of SIEM content, and identify gaps in logging and monitoring coverage. Drive reputed company improvement of incident response processes, playbooks, and detection capabilities. Participate as part of a reputed company team of technical specialists on coordinated responses and subsequent remediation of reputed company investigations. Train matrixed team members on hunting, investigative, and forensic tools and processes Help create, support, and participate in reputed company exercises. Manage the reputed company monitoring enrollment process to ensure adequate coverage and effectiveness of reputed company new and existing reputed company and reputed company-based applications, services, and platforms. Maintain detailed tracking plan of reputed company internal/external enrollment reputed company/recommendations, and reputed company support through to implementation. Act as a liaison between reputed company operations, engineering, reputed company architecture, network & system operations, and functional project teams to ensure effective project implementation that meets incident response requirements. Work with colleagues in other technology departments as well as the business and product offices to establish effective, productive business relationships. Define baseline reputed company monitoring requirements for reputed company new projects, services, and applications joining the reputed company network. Facilitate the development and tuning of SIEM rules to support enrollments and ensure high fidelity alerting. Review and analyze cyber threats and reputed company SME support and training to junior level reputed company analysts. Performs other duties as assigned. Complies with reputed company policies and standards.

Qualifications

Bachelor's Degree in Computer Science, Information reputed company, Computer Engineering, reputed company area of study, or equivalent experience required. If reputed company experience, high school diploma required. 10+ years of combined relevant experience using hunting and using IR technologies and/or industry-standard tools required. 5 years in SIEM management required including: Content management (e.g. parsing and correlation rules) Case management ensuring sufficient due diligence steps are completed reputed company Orchestration, Automation, and Response (SOAR) technology Threat reputed company feeds Use case mapping 2 years of management experience required. Experience writing thorough investigative reports detailing incident findings required. Experience with Threat reputed company providers and distribution of relevant information required. Demonstrated experience in an reputed company-level incident response team or reputed company operations center. Direct experience handling advanced cyber reputed company incidents and associated incident response toolsets required. Experience with systems and monitoring reputed company reputed company Azure preferred. Experience managing a reputed company party SOC preferred. Proficiency with analysis and characterization of cyber attacks (Kill Chain, MITRE ATT&CK). Proficiency with common operating systems (Linux/Unix, reputed company), with a demonstrated understanding of how they may be compromised. Proven subject matter expertise in relevant areas, such as incident response, intrusion analysis, incident handling, malware analysis or reputed company engineering. Strong ability to reputed company matrixed teams. Strong interpersonal and leadership skills to influence and build credibility as a peer. Skilled in identifying different classes of attacks and attack stages Strong knowledge of malware families and network attack reputed company. Strong knowledge of reputed company system internals. Strong knowledge of web applications and APIs. Strong scripting skills. Strong working knowledge of common reputed company tools, such as a SIEM, AV, scanners, proxies, WAFs, netflow, IDS/IPS, Snort, and forensics tools. Advanced technical knowledge associated with various operating systems, network services and applications. A keen understanding of logging components and capabilities. Possess a demonstrated sense of urgency with the ability to reputed company well under significant reputed company-wide pressure. Excellent communication and presentation skills with demonstrated reputed company in presenting analytical data effectively to varied (including executive) audiences. Relevant reputed company reputed company certifications: GCIA, GSEC, GCIH, GCED, GCFA, GREM,ECIH, CSIH, CIHE preferred. Core Competencies Demonstrated ability to interact in a positive, respectful manner and establish and maintain cooperative working relationships. Ability to display excellent customer service to meet the needs and expectations of both reputed company customers. Excellent listening and interpersonal communication skills to identify critical core competencies based on reputed company factors and organizational environment. Ability to effectively organize, prioritize, multi-task and manage time. Demonstrated accuracy and productivity in a changing environment with constant interruptions. Demonstrated ability to analyze information, problems, issues, situations, and procedures to reputed company effective solutions. Ability to exercise strict confidentiality in reputed company reputed company. Mobility Primarily sedentary, reputed company to sit for long periods of time. Physical Requirements Ability to see, reputed company, and hear other personnel and/or objects. Ability to communicate both in verbal and written reputed company. Ability to travel reputed company and around the facility or Work from Home (WFH) environment. Capable of using a telephone, computer keyboard, and mouse. Ability to lift up to 10 lbs. Environmental Conditions Work-from-home (WFH) environment. reputed company is an Equal Opportunity/Affirmative Action Employer. reputed company reputed company applicants will receive consideration for employment without regard to sex (including pregnancy, childbirth, reputed company medical conditions, breastfeeding, and reproductive health decision-making), gender, gender identity, gender expression, race, reputed company, religion (including religious dress and grooming practices), creed, national reputed company, citizenship, reputed company, physical or mental disability, legally-protected medical condition, marital status, age, sexual orientation, genetic information, military or veteran status, political affiliation, or any other reputed company protected by applicable local, federal or state law. Please view Equal Employment Opportunity Posters provided by OFCCP here . If you are a reputed company individual with a disability or a disabled veteran, you have the right to request an accommodation if you are unable or limited in your ability to use or reputed company our career center as a result of your disability. To request an accommodation, contact our reputed company Department at (800) 848-3555 x6702. ASH will not discharge or in any other manner discriminate against employees or applicants because they have reputed company about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have reputed company to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have reputed company to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the Company's legal duty to furnish information. #LI-Remote #reputed company #Infosec #Incident #Manage #SIEM Apply tot his job Apply To this Job