Analyst, Cybersecurity DFIR

Intercontinental Exchange Holdings, Inc.•Provo, UT

About The Position

The ICE Cybersecurity Digital Forensics and Incident Response (DFIR) team defends critical financial infrastructure from global cyber threats. The team uses an evolving arsenal of controls and requires technical proficiency, tenacity, professionalism, and strong communication skills. The analyst supports security analytics, incident management, endpoint forensics, countermeasures, proactive threat hunting, behavioral analysis, and intrusion detection. The role involves working with large data sets, investigating security incidents, analyzing forensic artifacts, and developing controls and detection capabilities.

Requirements

Understanding of networking and its application.
A university degree in a related discipline or at least one year in an Information Security role.
Hands-on experience with Windows and Linux.
Strong technical proficiency, tenacity, professionalism, and communication skills.

Responsibilities

Distill actionable information from large data sets for reporting, hunting, and anomaly detection.
Detect, document, investigate, and resolve security incidents efficiently.
Analyze forensic artifacts to construct meaningful incident timelines.
Design and implement preventative and corrective controls to counter emerging threats.
Develop and execute focused plans to discover advanced threats that evade traditional security controls.
Develop and implement criteria to identify anomalous user behavior that may indicate insider threat activity.
Develop and tune network anomaly control capabilities to produce reliable, actionable data.
Work effectively with teammates locally and at remote offices, share knowledge, and contribute to weekly peer meetings.
Take ownership of problems, pursue permanent solutions after temporary fixes, and find creative solutions.
Communicate clearly and accurately, listen to peers and supported employees, follow directions, and provide useful feedback.
Model professionalism, embrace additional responsibility, adhere to corporate policy, and work extra hours as needed to complete work.