Requirements

Experience: Proven experience in conducting thorough cybersecurity investigations.
Analytical Skills: Strong analytical and problem-solving skills, with the ability to think critically under pressure.
Technical Skills: Hands-on experience with Security Information and Event Management (SIEM) systems and familiarity with a broad set of security tools and investigation-supporting datasets.
Security Fundamentals: Proven understanding of security and privacy fundamentals.
Organizational Skills: Strong organizational skills to manage multiple tasks in a fast-paced environment.
Collaboration: A collaborative outlook that seeks to build and cultivate relationships.
Communication Skills: Strong written and verbal communication skills.

What you'll be doing

Investigate and Analyze: Conduct thorough investigations using critical thinking to identify indicators of compromise. Coordinate with CSIRT team members on containment and response activities.
Case Management: Maintain meticulous case management, ensuring all investigative actions are properly documented to support dispositions.
Security Operations: Participate in rotational opportunities across the CSIRT including incident response and cyber threat hunting.
Mentorship: Provide mentorship to other cyber defense analysts and act as an escalation point to aid in cyber defense operations.
Continuous Improvement: Participate in case reviews, find opportunities for continuous improvement in investigations and documentation, and mentor junior analysts.
Simulations and Training: Engage in tabletop exercises and incident simulations to enhance response strategies.
Stay Informed: Actively pursue knowledge of emerging threats and attack vectors while maintaining expertise in the dynamic cyber landscape.
Global Team Collaboration: Engage as an active member of a global 24x7 cyber defensive operations team, which will require some weekend coverage.
Process Documentation: Create, update, and maintain investigative process documentation to ensure consistency and efficiency.

Impact: Play a crucial role in protecting our organization’s data and ensuring business continuity.
Growth: Enhance your skills and knowledge through continuous learning opportunities and on-the-job experience.
Team: Work alongside a passionate and skilled team of cybersecurity professionals.
Innovation: Be at the forefront of developing and implementing modern cybersecurity strategies.
Culture: Thrive in a collaborative environment that values each team member's contributions and encourages professional growth and development.