Senior Information Security Incident Response Analyst

Location:

This is a hybrid remote/in-office role.

Medidata follows a hybrid office policy in which employees who are hired for an in-person position are expected to work on site a certain number of days per week following Company policy.

About our Company:

Medidata is powering smarter treatments and healthier people through digital solutions to support clinical trials. Celebrating over 25 years of ground-breaking technological innovation across more than 38,000 trials and 12 million patients, Medidata offers industry-leading expertise, analytics-powered insights, and one of the largest clinical trial data sets in the industry. More than 1 million registered users across approximately 2,300 customers trust Medidata's seamless, end-to-end platform to improve patient experiences, accelerate clinical breakthroughs, and bring therapies to market faster.

A Dassault Systèmes brand (Euronext Paris: FR0014003TT8, DSY.PA), Medidata is headquartered in New York City and has been recognized as a Leader by Everest Group and IDC. Discover more at . Listen to our latest podcast, from Dreamers to Disruptors, and follow us at ut the Team:
The Senior Information Security Incident Response Analyst  is focused on being the liaison between the information security, quality management and production support teams, and will be the primary support for information security incidents, vulnerabilities, and threat advisories.

The analyst will be responsible for securing the clinical cloud and its data from threats by ensuring the hosting environments are in compliance with industry’s standards and company’s security policies. You will support the Information Security management as a technical advisor and an agent of change.

Responsibilities:

Log and track information security events and alerts detected by  monitoring tools and third-party services

Assess the validity and impact of alerts

Recommend remediation plan and risk acceptance to management teams

Maintain third-party portals and tools

Investigate whether a breach of security occurred as a result of a cyber security incident

Provide detailed root-cause analysis reports

Provide primary support and analysis throughout the life-cycle of a security incident.

Continually assess and track industry security vulnerabilities and threat advisories

Assess impact to production systems as well as support tools and create security impact reports

Coordinate with multiple teams to remediate or accept potential vulnerabilities

Maintain accurate inventory of security keys and certificates

Manage the rotation of key and certificates

Ensure PKI infrastructure complies with policies and standards

Maintain audit records of access and changes to all security assets within Service Delivery Assist in the engineering, implementation, and monitoring security control measures for the protection of computer systems, networks and information systems

Participate in an on-call rotation and work outside of normal business hours

Qualifications:

Bachelor's Degree with 5+ Related Equivalent Experience Security Certification desired; and one will be required within one year of hireECIH or GCIH preferred

Well-versed in the Incident Response process

Solid understanding of Cloud Infrastructure and cloud-specific threats (AWS a plus)
Foundational understanding of Computer Forensics Working knowledge of Evidence Custodianship Experience writing automation scripts (Python a plus) and designing automation workflows

Strong documentation and process development skills

Able to clear a background check suitable for working in a Fed Ramp regulated environment.

Ability to operationalize best information security practices (ISO, NIST, HIPPA, PCI DSS)
Ability to learn in a fast pace and utilize this knowledge to advance DFIR and CTI…