Incident Response Analyst, I

Job not on LinkedIn

🔥 7 minutes ago

🏰 Missouri – Remote

🏰 Missouri – Remote

💵 $30 - $55 / hour

⏰ Full Time

🟢 Junior

🟡 Mid-level

🚨 Incident Response Analyst

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Centene Corporation

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1984

🛡️ Insurance

💼 Consulting

🏥 Healthcare

Insurance • Consulting • Healthcare

Centene Corporation is a leading provider of government-sponsored healthcare services, specializing in delivering affordable and high-quality healthcare solutions. For over 40 years, Centene has focused on transforming the health of communities by expanding access to Medicaid, Medicare, and Health Insurance Marketplace services, as well as serving military communities through the TRICARE program. As the largest Medicaid managed care organization and a key participant in the Marketplace, Centene emphasizes localized healthcare delivery combined with strong partnerships with nonprofit organizations to meet the unique needs of its members. Centene is also committed to corporate sustainability and social responsibility, prioritizing environmental stewardship and ethical governance to enhance the well-being of the communities it serves.

📋 Description

• Investigate security incidents and recommend security enhancements • Identify common attack patterns targeting externally facing assets • Assist with execution of the enterprise Incident Response Plan • Support enterprise-wide remediation efforts coordinated by DFIR • Contribute to leadership briefings and reporting • Triage and investigate security alerts, events, and notifications across endpoint, email, identity, and network telemetry • Escalate confirmed or suspected incidents to DFIR according to defined criteria • Analyze phishing and malicious email to determine disposition • Document investigation steps, findings, and dispositions in the case management system • Execute approved containment actions, including IOC blocking and host isolation • Identify detection tuning and automation opportunities • Support reviews of security configurations on production information systems and networks • Assist with prevention and resolution of security breaches • Support access authorization reviews and access control validation • Contribute to automated scripts, response playbooks, and programmed responses • Collaborate with Information Security Architects, Engineers, and software or hardware stakeholders • Integrate third-party attack monitoring and threat reporting services into internal CIRT communications systems • Perform other duties as assigned and comply with policies and standards

🎯 Requirements

• Must be authorized to work in the U.S. without employment-based visa sponsorship now or in the future • Bachelor's degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science) and 0–2 years of related experience, or equivalent experience, or completion of a Centene-sponsored emerging talent program • Networking fundamentals, including TCP/IP, DNS, HTTP, routers, switches, and firewalls • Windows and Linux operating system fundamentals • Log analysis and investigation of security events • Knowledge of indicators of compromise (IOCs) and threat actor tactics, techniques, and procedures (TTPs) • Preferred hands-on familiarity with EDR tools such as CrowdStrike or Microsoft Defender for Endpoint • Preferred hands-on familiarity with SIEM platforms and query languages such as Splunk SPL, KQL, or SQL • Familiarity with email security platforms such as Proofpoint and phishing analysis • Familiarity with the MITRE ATT&CK framework • Basic scripting with PowerShell or Python • CompTIA Security+, Microsoft SC-200, AWS Certified Cloud Practitioner, or ISC2 CC preferred but not required

🏖️ Benefits

• Competitive pay • Health insurance • 401K plan • Stock purchase plans • Tuition reimbursement • Paid time off plus holidays • Flexible approach to work with remote, hybrid, field or office work schedules • Additional forms of incentives may be included in total compensation • Equal opportunity employer committed to diversity