Cybersecurity Analyst, CSIRT

What you'll do

• Detect and assess cybersecurity events and incidents across the Target environment.
• Monitor SIEM and logging environments for security events, alerts, and potential threats.
• Implement new processes and procedures to improve monitoring, detection, and mitigation capabilities.
• Triage service requests from customers and internal teams while escalating events per the Incident Response Plan.
• Contain threats and perform remediation of the environment during or after a security incident.
• Participate in Cyber Hunt activities directed by Target Incident Commanders.
• Document event analysis and write comprehensive reports regarding incident investigations.

What we're looking for

• A four-year degree or equivalent experience is required.
• At least 2 years of experience in a Security Operations Center or Cyber Security Incident Response Team is required if no degree is held.
• Candidates must possess a security certification such as Security+, GCIA, GCIH, or CISSP.
• Experience managing cases with enterprise SOAR, SIEM, and/or Incident Management systems is required.
• Experience supporting network and host investigations is required.
• A thorough understanding of fundamental security and network concepts including operating systems, intrusion detection, TCP/IP, and ports is required.
• Strong analytical expertise, critical thinking, and excellent written and oral communication skills are required.
• Experience with host and network-based security tools and network monitoring in a SOC environment is preferred.