Cyber Defense Specialist, Experienced

The Information Security team is looking for a certified security professional to join our fast paced, collaborative, and diverse team of talent. Our mission is to provide operationally excellent next‑generation information security event monitoring, threat hunting, and incident response services that protect Blue Shield from adverse cyber events. The Cyber Defense Specialist, Experienced will report to the Senior Manager of Information Security Operations.

In this role you will work with a high‑functioning 24/7/365 team utilizing industry leading technology to identify, protect, detect, respond, and recover from adversary attacks.

In this role, you will:

• Provide network intrusion monitoring and response.
• Perform endpoint detection and response (EDR).
• Analyze application and web security events.
• Interpret logs to identify and respond to indicators of compromise (IOCs) and threats including User and Event Behavioral Analytics (UEBA) using a security information and event management (SIEM) environment.
• Utilize Security Orchestration, Automation, and Response (SOAR) of information security incidents.

• Requires practical knowledge of job area typically obtained through advanced education combined with experience.
• Typically, requires a college degree or equivalent experience and 3 years of prior relevant experience.
• Requires security industry certification.
• Experience in security event monitoring and incident response.
• Experience with Security Information Event Management (SIEM) searching.
• Experience with intrusion detection and network tools;
  Wireshark, Nmap.
• Knowledge of anti‑virus and malware detection.
• Knowledge of social engineering and phishing detection.
• Knowledge of Identity & Access Management.

This role requires employees to be in‑office based on our hybrid workplace model, balancing purposeful in‑person collaboration with flexibility. For most teams, this means coming into the office two days each week. Employees living more than 50 miles from an office location will work with their manager to determine in‑office time based on business need.

External hires must pass a background check/drug screen. Qualified applicants with arrest records and/or conviction records will be considered for employment in a manner consistent with Federal, State and local laws, including but not limited to the San Francisco Fair Chance Ordinance. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, protected veteran status or disability status and any other classification protected by Federal, State and local laws.

Office Environment – roles involving part to full time schedule in Office Environment. Based in our physical offices and work from home office/deskwork – activity level: sedentary, frequency most of work day.