Senior Cyber Defense Analyst

🔥 12 hours ago

🇺🇸 United States – Remote

💵 $71.6k - $124.2k / year

⏰ Full Time

🟠 Senior

🧐 Analyst

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Experian

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1996

🤖 Artificial Intelligence

🤝 B2B

☁️ SaaS

Artificial Intelligence • B2B • SaaS

Experian is a global leader in digital experience, technology, and transformation. They partner with recognized brands to enhance customer understanding, innovate product strategies, and implement agile technology solutions. With a focus on delivering superior customer experiences through AI, cloud architecture, and project management, Experian helps businesses streamline their operations and achieve their objectives effectively.

📋 Description

• Perform daily security operations by monitoring, triaging, and conducting response activities for security events and alerts associated with cyber threats, intrusions, and compromises • Analyze events using security tooling and logging, such as SIEM, EDR, and assess the potential risk/severity level of cyber threats • Escalate higher-risk events to dedicated incident response and management teams in the CFC, according to established processes • Collaborate with external teams for incident resolution and escalations, driving incident handling • Notify team Lead(s) of concerns related to operations, such as anomalous changes in metrics, notable open incidents, quality concerns, or observed risks; support with resolution if appropriate • Manage and complete assigned caseload throughout the incident response lifecycle, including analysis, containment, eradication, recovery, and lessons learned; maintain standards of quality to resolve events • Maintain all case documentation, including notes, analysis findings, containment steps, and cause for each assigned security incident • Perform incident updates or make contact with end-users promptly and document them, and complete case hand-off processes, such as completing/verifying shift logs • Apply subject matter expertise in security operations processes to help improve relevant playbooks, Standard Operating Procedures (SOPs), and training materials • Assist the team Leads and management on use case development by suggesting enhancements or tuning of use cases to improve the security posture of Experian • Participate in paid overtime when operational needs may require additional support

🎯 Requirements

• 3+ years of information security experience working within a Security Operations Center or Cyber Security Incident Response Team • Bachelor's Degree in Computer Science, Computer Engineering, Information Systems, Information Security, or a related field • 6+ years of experience working within a Security Operations Center, Incident Response Team, law enforcement, and/or military experience may be accepted in lieu of this requirement • Demonstrate working knowledge of the Incident Response Life Cycle, MITRE ATT&CK Framework, Cyber Kill Chain, and other cybersecurity frameworks • Demonstrated knowledge of common intrusion methods and cyber-attack tactics, techniques, and procedures (TTPs), as well as common industry practices to investigate and respond to threats, including phishing, malware, network attacks, suspicious activity, and data security incidents • Demonstrated proficiency in determining appropriate methods to contain, eradicate, and recover from a variety of security incidents • Provide recommendations to prevent incidents from recurring • Possesses an understanding of common Operating Systems (Windows, Linux, Mac OS), Networking (Firewalls, Proxies, NetFlow, etc.), Cloud Infrastructure (AWS, Azure, GCP), and Security Technologies (Anti-Virus, Intrusion Prevention, Web Application Firewalls, etc.) • Ability to review and interpret device and application logs from a variety of sources (e.g., Firewalls, Proxies, Web Servers, System Logs, Splunk, Packet Captures, etc.) to identify root cause and determine next steps for containment, eradication, and recovery • Experience with common Incident Response and Security Monitoring applications such as SIEM (e.g., Qradar, Splunk), EDR (e.g., FireEye HX, CrowdStrike Falcon, Microsoft Defender, etc.); experience with Security Orchestration, Automation, and Response (SOAR) technologies such as Palo Alto XSOAR and Google Secops (Chronicle) are a plus • Continuously build advanced cybersecurity expertise across cloud security (Azure/AWS), incident response, threat detection, system and network forensics, SIEM/monitoring tools, vulnerability management, malware analysis, and scripting/automation • One or more professional, currently-held certifications related to Digital Forensics, Incident Response, or Ethical Hacking highly preferred (e.g., GCIH, GMON, GCED, GSOC, CEH, GCFE, GCFA, CFCE, ENCE) • Bonus: Information security management certifications (CISSP, CISM) or vendor-specific certifications

🏖️ Benefits

• Flexible Time Off: 20 Days • Great compensation package and bonus plan • Core benefits including medical, dental, vision, and matching 401K • Flexible work environment, ability to work remote, hybrid or in-office • Flexible time off including volunteer time off, vacation, sick and 12-paid holidays