Cyber Security Incident Response, Incident Analyst - First Data Terrell Mill Road, Marietta, GA, United States Bookmark Share Print 301 0 3

Listing Description

As a member of First Data’s Cyber Security Incident Response Team (CSIRT), the Incident Analyst will coordinate the preliminary response activities for cyber security incidents across the Global company environment. The successful candidate will focus on preliminary identification and analysis of potential cyber security incidents. The successful candidate will perform triage functions such as email review, log analysis, analysis of network traffic and endpoint systems, enrich data, and will be responsible for escalating and assigning the incidents to level two incident handlers. The candidate will join a team of incident analysts and incident handlers, and will have an opportunity to participate in a number of global cyber security initiatives.

Candidates should have a basic understanding of incident response processes, network investigative techniques, and cyber security trends and issues.

This position requires that the candidate be a lawful permanent resident of US Citizen. The candidate should be able to travel domestically and/or internationally in support of the investigative mission.• Understand CSIRT functions and participates in the triage of cyber security events.

Receive and analyze alerts from various sources within the enterprise and determine possible causes of such alerts.

Triage logs from various security controls, including, but not limited to, firewall, proxy, host intrusion prevention systems, endpoint security, application and system logs, to identify possible threats to network security.

Enrich security event data to streamline the incident response process.

Perform incident triage, documentation, and escalation of appropriate incidents to cyber security incident handlers.

Maintain proper documentation and creation of reports.

Candidate requirements:

1-2 year’s experience working in incident response and/or other IT related fields tied to networking and enterprise information system environments.

Bachelor’s degree in a technology field preferred.

Interest in the cyber security field including specific focus on the following domains: enterprise security defense, network and application penetration testing, and incident response.

Basic knowledge of network protocols, enterprise architecture, and common network logging functions.

Good written and verbal communications skills.

Ability to prioritize assignments and efforts in a complex work environment.

Self-motivated and able to work in an independent manner

Industry certifications such as CEH, CISA, Security + are desirable.