Lead Security Incident Response Analyst
Job Description
Responsibilities :
- Serve as the Subject Matter Expert of Tier 3 Security Incident Alerts.
- Serve as Escalation contact from Tier 1 and Tier 2 analysts with MDR third party vendor.
- Serve as Lead Incident Responder, including potential after hour engagements.
- Creation of Alerting dashboards and reports for both technical and non-technical leaders.
- Tune, Optimize Security Tooling configurations as needed for End Point Security, DLP prevention Policies, etc.
- Creation of threat detection rules using data from firewalls, IDS, Antivirus / EDR, DLP, WAF, Netflow, Vulnerability Management, System Event Logging, Cloud Security Platforms.
- Creation of technical documentation detailing playbooks, workflows, queries and more.
- Provide solutions to improve secure configuration and hardening of End Point Security, Network Security, Email Security, etc.
- Perform technical analysis of malware and network / web application attacks and other suspicious activities.
- Use the Incident Response Lifecycle to guide your work tasks and implement processes and procedures.
- Research latest threats and attack tactics - implement defensive measures and response procedures to reduce potential impact.
Education and Experience :
- Certified Information Systems Security Professional (CISSP) or Equivalent preferred.
- SANS and / or Advanced GIAC certifications desired.
- Bachelor's degree in Computer Science or a related technology field or equivalent in comparable work experience within the network or security field preferred.
Skills and Knowledge :
- Excellent communication and writing skills.
- Strong analytical skills.
- Ability to solve unique problems with outside-the-box solutions.6Open-minded, adaptable, and passionate about learning.
- Highly motivated and able to work independently and as part of a high performing team.
- Broad knowledge of Enterprise Infrastructure concepts and best practices as they relate to Cyber Security and incident response.
- Solid understanding of packets, network traffic, and the OSI model.
- Knowledge of penetration testing methods and tools.
- Python knowledge is a strong plus.
- MITRE Framework is a strong plus.
About the Team
Company Overview :
ADT has been in the business of helping save lives since 1874. As the #1 smart home security provider in the U.S., we help protect and connect families, businesses and larger commercial customer every day.
Our continuous innovation, advanced technology and strategic partnerships deliver products and services that help protect life and valuables, whether at home, your business or on the go.
And as times change, so do we. Above all, our mission is clear : we help save lives for a living. Looking for a career where you can make a real impact?
Join our team today and put purpose behind your paycheck. #WeAreADT
Check out more about life at ADT here.