Cyber Security Incident Response Analyst

$41.06 – $45 / hr

Information Security Engineer 2 – Chandler, AZ (Hybrid)

Contract Duration: 18 Months

• 2+ years of Information Security Engineering experience, or equivalent demonstrated through work or consulting experience, training, military experience, education.
• 1+ years of Incident Response Protocols and Tools experience.
• 1+ years experience with Security Information and Event Management (SIEM) and Security Orchestration, Automation and Response (SOAR) products.
• 1+ years of Azure, Office 365 or Cloud technologies.

• 2+ years’ experience with Endpoint Detection and Response (EDR) products.
• Knowledge and understanding of security analytics including incident response and digital forensics.
• Knowledge and understanding of data security controls including malware protection, firewalls, intrusion detection systems, content filtering, Internet proxies, encryption controls, endpoint detection & response, and log management solutions.
• Knowledge and understanding of banking or financial services industry.
• Experience with host and/or network log analysis as applied to incident response/threat hunting.
• Knowledge of offensive security, with the ability to think like an adversary when hunting and responding to incidents.
• Knowledge and understanding of security analytics, incident response and Identity Access Management.
• Certifications in: GIAC, OSCP, OSWP, OSCE, OSEE, OSWE.
• Cloud Certifications such as GCP, AWS.
• Experience in a 24×7×365 global security operations center environment.

• Participate in low to moderately complex initiatives and identify opportunities for process improvements within Information Security Engineering.
• Review and analyze basic or tactical Information Security Engineering assignments or challenges that require research, evaluation, and selection of alternatives for low-to-medium risk deliverables.
• Present recommendations for resolving low to moderately complex situations and exercise independent judgment while developing understanding of function, policies, procedures, and compliance requirements.
• Provide information to client personnel in Information Security Engineering.
• Consult to improve awareness and compliance with Enterprise Information Security policy, processes and standards.
• Perform remediation of security assessment review issues, complex ad hoc data, and reporting to support information security risk management.
• Guide and direct review of assessment findings and mitigating controls to optimize information security.
• Identify and direct information asset portfolio reconciliations and certifications.
• Provide advanced data aggregation and data on information security risk exposure.
• Develop and deliver Information Security Education Awareness and Training per Enterprise Information Security Program standards.
• Review draft and proposed control standards for business impact and recommend modifications or clarifications as required.
• Conduct security control testing and consult with stakeholders.
• Evaluate and interpret internal and Enterprise Information Security policies, processes and standards, and provide recommendations to improve them.
• Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals.
• Interact with internal customers.
• Serve as a mentor to less experienced staff.