Lead, Incident Response

Job Classification:

Technology - Information Security Prudential’s Global Technology team is the spark that ignites the power of Prudential for our customers and employees worldwide. Our organization plays a critical and highly visible role in delivering customer-driven solutions across every area of the company. The Global Technology team is made up of diverse, agile-thinking, and highly skilled professionals; we use our combined capabilities to enable the organization with innovation, speed, agility, scalability, and efficiency.

The Global Technology team takes great pride in our culture where digital transformation is built into our DNA. When you join the Global Technology organization at Prudential, you’ll unlock a challenging and impactful career – all while growing your skills and advancing your profession at one of the world’s leading financial services institutions.

Prudential Financial is a Fortune 100 financial services leader with a dynamic and diverse workforce and a strong emphasis on talent management. Our Cyber Defense & Response (CDR) team is a global team responsible for incident response and investigations in Asia, Europe and the Americas. This is an exciting time to join a growing team. The CDR team is seeking an experienced individual for the position of Digital Forensics & Incident Response Lead.

Your Team & Role:

The Digital Forensics & Incident Response Lead will serve as an individual technical contributor, responsible for conducting digital forensic and incident response analysis, responding to security incidents, assisting with threat hunting operations, performing incident readiness activities, and completing other related cybersecurity tasks as required in a highly dynamic global corporate environment.

Here is What You Can Expect on a Typical Day:

Scope and perform enterprise-wide, global investigations with both on-prem and cloud technologies such as Active Directory/Entra, M365, Azure, AWS, etc.

Leverage Splunk’s Search Processing Language (SPL) and Microsoft’s Kusto Query Language (KQL) in support of investigative workflows

Utilize EDR tooling to perform enterprise-wide investigations and analysis

Perform log, host, memory, and network-based forensics in support of active investigations

Perform malicious code triage in support of incident response activities

Possess strong verbal and written communication skills sharing key investigative details to stakeholders and business leaders globally

Collaborate closely with technical stakeholders in support of active investigations

Develop scripts, queries and automation workflows in support of XSOARLead and contribute to unique team-driven projects, advancing the team's forensic and response capabilities across the enterprise

The Skills & Expertise You Bring:5 plus years of experience responding to cyber incidents in large corporate/enterprise environments.

Bachelor's degree in Digital Forensics, Information Security, Computer Science, Information Technology, or related discipline.

Experience using enterprise forensic software suites (X-Ways, EnCase, etc.).Knowledge of common scripting languages (Python, Power Shell, Bash, etc.)Industry standard certifications (CCE, EnCE, GCFE, GCFA, GCIH, GREM, GNFA, GPEN, etc.)Comprehensive understanding of adversarial threat frameworks such as MITRE ATT&CK and Lockheed Martin’s Cyber Kill Chain

What we offer you:

Prudential is required by state specific laws to include the salary range for this role when hiring a resident in applicable locations. The salary range for this role is from $ to $. Specific pricing for the role may vary within the above range based on many factors including geographic location, candidate experience, and skills.

Market competitive base salaries, with a yearly bonus…