The IT Cyber Incident Response Analyst plays a key role in maintaining operational cyber security defense and responding to threats against the enterprise from adversaries worldwide.
The IT Cyber Incident Response Analyst will monitor, detect, analyze, and respond to cyber security events and incidents within information systems and networks. The Analyst uses security solutions and processes to deliver Information Security operational services including; intrusion detection and prevention, situational awareness of network intrusions and security events, data spillage, and associated incident response actions. The Analyst operates and maintains security toolsets to support continuous monitoring. The individual must be comfortable working in a regulated environment, be able to work independently, and have strong problem-solving skills. Required core values include commitment to customers and process excellence along with demonstrated ethics and integrity.
Duties and Responsibilities:
- Monitor and analyze infrastructure security logs and incidents
- Respond to alerts from security tools
- Interpret alerts and escalate issues that cannot be resolved immediately
- Analyze malware and determine its impact on the environment
- Stay current on emerging threats and possible attacks on company infrastructure and develop risk mitigation approaches to minimize any impact
- Conduct technical analysis of the security products, patches, issues, and mandates necessary to support our continuous effort to improve IT security
Qualifications:
- BS in Computer Science, Information Systems, a related technical field, or the equivalent network and security experience
- One to three years of IT security operations experience
- Up-to-date knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors
Knowledge, Skills & Abilities:
- Good understanding TCP/IP and other network administration protocols
- Good understanding of SMTP and associated email security threats including phishing and business email compromise schemes
- Good understanding of Windows, Linux, Android, IoS and database technologies
- Good understanding of encryption, multifactor authentication, crypto, and security certificates
- Self-motivated, directed, and detail-oriented
Arvin Clark Sikat, Sombilla EA License No.: 02C3423 Personnel Registration No.: R1222536
