Adv-Cyber Incident Response

FedEx Freight•Memphis, TN

11d

About The Position

Responsible for working with leadership to create and maintain incident response playbooks, provide recommendations during the security architecture review process for new applications, and work with security engineering teams to ensure full coverage of security tools and response capabilities.

Requirements

Bachelor’s degree in business, computer science, information systems, or related field; equivalent formal training.
Five (5) years of experience in information technology, cyber security, or incident response.
Familiarity with cyber incident response processes, including detection, analysis, containment, eradication, and recovery
Experience with automation (Powershell, Python, APIs, etc.) for Incident Response activities
Strong working knowledge of SIEM, EDR, Identity and Cloud protection tools
Excellent analytical and problem-solving skills with SIEM data analytics for effective incident investigation of root cause
Excellent communication skills for clear reporting and collaboration with technical teams and executives

Responsibilities

Respond to information security incidents that are escalated to the Incident Response team for Teir 3 and Teir 4.
Responsible for all phases of incident response for assigned incidents.
Ensure timely containment, recovery, and communication with key stakeholders while keeping business units informed throughout the incident lifecycle.
Advise on the development, implementation, and operation of incident response systems and processes to ensure effective threat detection, containment, and remediation.
Conduct post-incident technical investigations to understand root-cause analysis.
Facilitate workshops, presentations, and stakeholder discussions to drive shared understanding.
Ensure lessons learned translate into improved defenses and remediation plans
Plan and execute red/purple team exercises, tabletop simulations, and other readiness activities.
Develop and maintain incident response playbooks, escalation protocols, cross-team coordination, User and Entity Behavior Analytics (UEBA) program, and model alert correlation processes.
Foster collaboration with remote teams to ensure consistent incident response and security operations.
Comply with all applicable laws/regulations, as well as company policies/procedures.
Perform other duties as assigned.