Job Description
The Cybersecurity Response Engineer position is a valued member of the Information Protection and Risk Management (IPRM) department. The Cybersecurity Response Engineer will be a part of the Cyber Threat Response (CTR) team and will primarily serve the Security Operations Center (SOC) and Cyber Security Incident Response Teams (CSIRT) by developing and maintaining alert use cases, onboarding new security tools, facilitating access and training, and managing overall risk. To do so, they will also work closely with the Cyber Analytics and Data Science (CADS) team, as well as various Cyber Security Technology (CST) engineering teams throughout IPRM.
Develop advanced security alerts for SOC consumption
Identify automation opportunities leveraging a SOAR tool to optimize SOC processes
Coordinate with different teams to complete agile project objectives
Generate reports around security events and metrics
Provide support for incident response investigations
Utilize attack simulations to test or discover alerting conditions
Participate in Threat Hunting exercises
$40/hr to $55/hr
Exact compensation may vary based on several factors, including skills, experience, and education.
Benefit packages for this role will start on the 31st day of! employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401K retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com .
To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/ .
Skills and Requirements
4+ years of Cybersecurity experience
Strong protection response experience
Experience with splunk
Strong experience with use case development lifecycle (building out and testing use cases) Incident response or SOC experience null
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion,sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military oruniformed service member status, or any other status or characteristic protected by applicable laws, regulations, andordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to HR@insightglobal.com.