Senior Incident Response Analyst (Sr. IT Security Specialist)

Together we strive for everyone's opportunity towards a better financial future.

• Manage security incidents from multiple sources including: privacy, vulnerabilities, phishing, malware, ransomware, and forensic investigations
• Conduct technical research in support of fraud and other corporate investigations
• Ability to prioritize and balance multiple incidents as well as adjust to shifting priorities
• Facilitate incident meetings involving technical, business, compliance, and legal teams.
• Analyze technical data (logs, configurations, etc.) from a multitude of sources (SIEM systems, firewalls, web servers, and Linux/Windows devices) to understand the source/impact of security events.
• Participate in forensic investigations as required, to include the collection, preservation of electronic evidence, analysis, and reporting.
• Produce high quality oral and written presentations, communicating complex technical matters clearly and concisely with audiences ranging from peers, to Sr. Management and customers.
• Development and maintain standard operating procedures.

• 3 most important skills: Incident Response -level 2 or 3, Cloud experience (prefer Azure, but AWS ok), and Forensics.
• Bachelor's degree, ideally in Computer Science, Security, Engineering, or a related field.
• 3+ years of professional IT experience; experience in a large enterprise and a Security Operation Center (SOC) environment is desirable.
• Experience with SEIM platforms such as SPLUNK: writing searches, creating dashboards, and performing forensics.
• Experience with Endpoint detection and prevention suites (Symantec, Splunk, CrowdStrike, etc.): performing forensics, securing devices and collecting evidence.
• A CISM or CISSP certification is desirable, to include those with Associate of (ISC)2 status.
• Experience in security aspects of multiple platforms, operating systems, software, communications, and network protocols.
• Understanding of and experience with common Internet services/protocols, such as IP, TCP, UDP, HTTP, TLS, SMTP.
• Requires excellent analytical ability, consultative and communication skills, strong judgment, and discretion in high pressure environments.
• Strong verbal and written communication skills with ability to tailor message to various audiences (technical, operations, leadership, client).
• Must be highly skilled and proficient in problem solving, with an aptitude and willingness to learn new technologies.
• Self-motivated with the ability to manage and prioritize multiple deliverables.
• Experience with GitHub, code management and versioning and documenting in markup a plus.
• Experience with scripting (PowerShell, bash, etc.) is a plus
• Experience with host-centric tools for forensic collection and analysis (Encase, FTK, etc.) is a plus.
• Digital Forensics and Incident Response (DFIR) experience and certification is desirable. (Encase certified or GIAC: GBFA, GCFA, GCFE, GREM) is a plus
• DFIR experience in cloud environments is a plus
• Understanding of APT, Cyber Crime and other associated tactics is a plus
• An interest in reverse engineering, red-teaming, penetration testing, and competing in Capture the Flag (CTF) events is a plus

• Health, dental, vision and life insurance plans
• 401(k) Savings plan - with generous company matching contributions (up to 6%)
• Voya Retirement Plan - employer paid cash balance retirement plan (4%)
• Tuition reimbursement up to $5,250/year
• Paid time off - including 20 days paid time off, nine paid company holidays and a flexible Diversity Celebration Day.
• Paid volunteer time - 40 hours per calendar year

• Customer Focused: Passionate drive to delight our customers and offer unique solutions that deliver on their expectations.
• Critical Thinking: Thoughtful process of analyzing data and problem solving data to reach a well-reasoned solution.
• Team Mentality: Partnering effectively to drive our culture and execute on our common goals.
• Business Acumen: Appreciation and understanding of the financial services industry in order to make sound business decisions.
• Learning Agility: Openness to new ways of thinking and acquiring new skills to retain a competitive advantage.