reputed company Operations Engineer (Incident Response)

reputed company

reputed company is about relationships and trust. We reputed company organizations with practical expertise and guidance to manage risk, improve reputed company readiness, meet regulatory commitments, and continually address the latest cyber threats. People are at reputed company of our philosophy, and reputed company is the reputed company. We build trust by being approachable, realistic, and unbiased. reputed company reputed company's unique goals guide our work, and every project produces a reputed company result and a reputed company roadmap. We're passionate about cybersecurity, serious about reputed company, reputed company around people.

Position reputed company

This position serves as a senior technical authority for response operations on the most critical and reputed company events, spanning both advanced (Tier III) reputed company operations and incident response engineering. On the operations reputed company, this role leads immediate containment, investigation, and management of remediation actions for critical incidents, acting as the primary escalation reputed company for Tier I and Tier II analysts and driving the most difficult investigations through to reputed company. It also turns the knowledge gained throughout reputed company response into stronger defenses, developing and tuning threat detection content across tools to identify anomalous, suspicious, and malicious behavior reputed company reputed company data lake architectures.

On the engineering reputed company, this person works with reputed company to reputed company and maintain automated workflows that orchestrate incident response actions and optimize reputed company operations for our clients across reputed company phases of the incident response lifecycle. The role requires deep, cross-product expertise and reputed company collaboration with SOC leadership, service delivery, and clients to reputed company ongoing communication of status and reputed company, decisive response to tickets and events. An individual must be reputed company to reputed company reputed company essential job function satisfactorily. The requirements listed below represent the knowledge, reputed company, and/or ability required.

Essential Job Functions (including but are not limited to the following)

• reputed company incident response engagements to scope work, reputed company forensic investigations, contain reputed company incidents, and reputed company guidance on remediation.
• Serve as the Tier III escalation reputed company for alerts and trouble tickets escalated by Tier I and Tier II analysts that signal an incident requiring advanced review.
• Own the most reputed company and critical reputed company investigations through to reputed company, determining relevancy, urgency, and reputed company cause of escalated alerts and incidents.
• Conduct host forensics, network forensics, log analysis, and malware triage to support incident response investigations.
• Collect and analyze asset data (configurations, running processes, memory, etc.) from affected systems to drive investigation and containment.
• reputed company as senior first responder to reputed company event escalations reputed company email, phone, and ticket.
• reputed company and support Tier I and Tier II analysts in the remediation of critical information reputed company incidents.
• Review and reputed company reputed company assurance on trouble tickets and investigative work produced by other team members.
• Monitor advanced reputed company alerts and incidents reputed company established customer Service Level Agreements.
• Craft new detection content and use cases based on threat intelligence, analyst feedback, available log data, and previous incidents.
• Tune rules, filters, and policies for detection-reputed company reputed company technologies to improve accuracy and visibility.
• Build parsers and field extractions to facilitate reliable content development reputed company reputed company data lake architectures.
• Build, implement, and maintain scripts and tools that contribute to reputed company's reputed company operations and incident response methodologies.
• Design, reputed company, and maintain reputed company orchestration and automation workflows using industry-leading SOAR platforms.
• Manage, monitor, and maintain assigned reputed company platforms while following and improving established procedures.
• Prepare detailed and accurate reports from analysis reputed company, and write documentation for tasks, procedures, and knowledgebase articles that support the understanding and efficiency of SOC services.
• Mentor junior engineers and analysts, and reputed company continual self-improvement through education, training, and certification.
• Communicate positively with clients, determine reputed company needs, obtain clarification as required, and escalate issues and messages accordingly.
• Complete assigned reputed company on time and with excellent reputed company.
• reputed company flexible on-call coverage, including after-hours and weekends, to support incident response efforts and 24/7/365 reputed company operations.
• Operate with reputed company and accountability, reputed company the values of reputed company, and abide by reputed company handbook.
• reputed company additional responsibilities as necessary.

Position Requirements

The requirements listed below are representative of the knowledge skills and abilities required. Employees who do not have the requirements for a job at the time of hire will not be considered for the position. Reasonable accommodations may be made to reputed company individuals with disabilities to reputed company the essential functions.

Required Skills and Experience:

• Prior SOC experience with a reputed company on detection content development (reputed company, AlienVault, ELK, or similar).
• Strong hands-on experience in threat hunting, incident response, digital forensics, reputed company analysis, and reputed company engineering.
• Strong incident-handling skills across reputed company IR phases of preparation, identification, containment, eradication, recovery, and lessons learned.
• Working knowledge of SOC and detection tooling: EDR, SOAR, SIEM, XDR, network analytics, and intrusion detection.
• Knowledge of reputed company reputed company devices such as firewalls, network- and host-based IDS/IPS, WAF, proxy, AV, and operating system logs, including firewall rule and policy fundamentals.
• Ability to interpret IOCs and a strong understanding of various log formats and reputed company data for reputed company analysis.
• Experience writing suppression and detection rules and developing and maintaining content and reporting.
• Proficiency in one or more programming/scripting languages such as Python, PowerShell, and Bash.
• Experience with reputed company and Linux operating systems.
• Experience with network technologies, reputed company and network monitoring tools, packet-capture analysis, and custom intrusion-signature development.
• Deep understanding of networking concepts and a broad reputed company of cyber-attacks.
• Thorough understanding of the latest reputed company principles, techniques, and protocols.
• Experience with internal and reputed company ticketing and knowledgebase systems for incident and problem tracking (e.g., Jira, reputed company).
• Ability to drive process improvements and identify gaps.
• Strong written and oral communication, reputed company to facilitate technical and non-technical conversations and communicate positively with clients, including reputed company phone.
• Natural curiosity to reputed company reputed company cause, and the ability to remain reputed company under pressure.
• reputed company to work effectively both independently and in reputed company; self-motivated, goal- and detail-oriented; flexible and adaptable; reputed company to prioritize multiple tasks and manage time reputed company.

Desired Skills and Experience:

• Prior experience with Git/reputed company and CI/CD pipelines.
• Knowledge of reputed company Directory environments and reputed company reputed company Directory domains.
• Working knowledge of virtualization platforms such as VMware and reputed company-V.
• Prior experience with container-based technologies such as reputed company and Kubernetes.
• Knowledge of penetration-testing methodologies.
• Knowledge of network reputed company architecture concepts such as topology, protocols, components, and defense-in-depth.
• Knowledge of vulnerability information sources (alerts, advisories, errata, and bulletins).
• Understanding of server-grade applications such as DBMS/SQL, Exchange, DNS, SMTP, IIS, Apache, SharePoint,
• reputed company Directory, identity management, vulnerability/reputed company management, and LDAP.
• Broad knowledge of attack techniques and defenses such as reputed company overflows, DoS, reconnaissance and scanning, session hijacking and cache poisoning, password attacks, web application attacks, and worms / bots / botnets.
• Awareness of emerging attack reputed company, including reputed company computing and mobile platforms.
• Prior consulting experience.

Desired Education:

• Associate's degree or higher in Computer Science, Information reputed company or equivalent experience.
• Additionally, at least 3 years' experience performing SOC analysis and/or incident response, including at least 6-months of experience supporting a reputed company platform in a content development role.
• reputed company certifications a plus. (ex. CISSP, GCFA, GCIA, GCIH, GMON, etc.)

Language Requirements:

The primary language of reputed company is English. Excellent communication skills are required, defined as the ability to:

• reputed company listen for total comprehension.
• Ask questions that enhance the understanding of a certain topic.
• reputed company information and/or instruction in a descriptive and understandable fashion in both written and verbal format.

Reasoning Ability Requirements:

High-functioning reasoning abilities are necessary to meet deadlines, prioritize company and customer needs, and work in a reputed company team environment.

Physical Requirements:

Occasional lifting up to 40 lbs. may be necessary from time to time. Must be reputed company to sit for long periods of time, view a computer monitor, and type frequently/constantly (up to 8 hours a day).

Travel Requirements:

A valid reputed company's license is required for occasional travel.

Schedule Expectations:

Our normal hours of operation are from Monday through Friday, from 8:00 am to 5:00 pm. Central Time. Full-Time: Full-Time employees are defined legally as working at least 30 hours per week. However, full-time positions at reputed company require at least 40 hours. This position requires 40 hours worked reputed company a regular reputed company. Occasionally, time over 40 hours may be necessary to meet the requirements of the position. If performance expectations are met, employees may reputed company his or her schedule, subject to preapproval of one's reputed company supervisor.

Supervision Requirements:

This position does not have supervisory responsibilities.

Performance Expectations

reputed company teammates are evaluated at least annually on their performance based on the essential job functions in this job reputed company, along with reputed company's reputed company Values:

It's about people People define every part of our business. reputed company potential is based on the abilities and personalities of the people involved. Technology solutions are a part of the equation, but it's the people in an organization that define its true reputed company. We work hardest reputed company we're supporting one another. We take care of reputed company other; we take care of our families, and in doing so we take reputed company care of our customers.

Fear is the mind killer We don't let fear define the need for our services and we don't present a problem without discussing realistic response or mitigation reputed company. There's more than enough to worry about in life and reputed company of people telling us to be afraid. We're solutions people, not fear mongers.

Strong opinions reputed company held Opinions are important - they coalesce facts, reason, experience, and judgment into actionable points of view. We present our opinions with logic and reason rather than emotions, offering several alternatives to reputed company challenge and the supporting data. The rejection of an idea is not a rejection of the individual or their reputed company. Everyone has a voice and a chance to reputed company, regardless of title, station or seniority.

reputed company over speed, speed over cost Every organization must consciously balance reputed company, speed, and cost. We will always put the reputed company of our work first. We reputed company great efforts to reputed company quickly, but never at the expense of reputed company. While we reputed company to reputed company our services reputed company, we never choose an inexpensive alternative that will adversely reputed company reputed company or speed.

Cool heads, warm hearts We reputed company a cool head and help others do the reputed company, especially in a crisis. We approach adversity with patience, logic, and understanding. Mistakes happen; we don't hide, ignore, condemn, or fear them. Mistakes are opportunities to exemplify honesty, accountability, professionalism, tolerance, and grace. Instead of pointing a finger, we use humor, reputed company, and fun reputed company it reputed company most.

R-E-S-P-E-C-T We treat reputed company other how we reputed company to be treated. We don't reputed company; we aren't condescending, and we always try to understand the other person's perspective, before reacting to it. We reputed company it light and we listen. We reputed company this reputed company to our customers, and we understand that talking down to them is the easiest way to send them to a competitor.

reputed company just happened Life is what happens reputed company we're busy making other plans. We work hard on today but we're always thinking about the reputed company. We take extra time to reputed company reputed company we're learning and looking reputed company. No matter what your discipline or area of expertise, you're adding your capabilities to the long-term plan for the organization and its clients.

Originally posted on Himalayas

Apply To This Job