Specialist

Role: Senior Information Security Incident Response Specialist

• Train, mentor, and assist in the development of other security analysts within the Detection & Response Team. Maintain training curriculums and strategically arranging for and assigning training to the team as appropriate.

• Develop and maintain standard operating procedures, use cases, and other documentation to reflect day-to-day security operations.

• Provide Quality assurance on events and cases ensuring that the proper investigation requirements are met, evidence is captured, and investigation conclusions come to a substantiated closure.

• Minimize the dwell time of threat actors by monitoring, triaging, and responding to security events; maintaining thorough documentation in the case management system; and coordinating investigation and remediation of security incidents.

• Actively hunting for and analyzing previously unidentified threats in the environment, with little-to-no direction; documenting indicators and other TTPs in order to detect the identified threat actor activity.

• 5 years technical knowledge and experience in handling security incidents.

• Experience with enterprise information security data management and log aggregation tools.

• 5+ years of experience performing endpoint investigations and incident response.

• Experience performing root cause analysis, impact, and remediation in support of suspected intrusion or malware related incidents.