Cyber Incident Response Engineer. Associate / Wilmington, DE

BlackRock•Wilmington, DE

6d•$110,000 - $138,000•Hybrid

About The Position

About this role About BlackRock At BlackRock, we are all connected by one mission: to help more and more people experience financial well-being. Our clients, and the people they serve, are saving for retirement, paying for their children’s educations, buying homes and starting businesses. Their investments also help to strengthen the global economy: support businesses small and large; finance infrastructure projects that connect and power cities; and facilitate innovations that drive progress. This mission would not be possible without our smartest investment – the one we make in our employees. It’s why we’re dedicated to creating an environment where our colleagues feel welcomed, valued and supported with networks, benefits and development opportunities to help them thrive. For additional information on BlackRock, please visit careers.blackrock.com | www.blackrock.com/corporate | Instagram: @blackrock | Twitter: @blackrock | LinkedIn: www.linkedin.com/company/blackrock BlackRock is proud to be an Equal Opportunity and Affirmative Action Employer. We evaluate qualified applicants without regard to race, color, national origin, religion, sex, sexual orientation, gender identity, disability, protected veteran status, and other statuses protected by law. BlackRock will consider for employment qualified applicants with arrest or conviction records in a manner consistent with the requirements of the law, including any applicable fair chance law. Our Benefits To help you stay energized, engaged and inspired, we offer a wide range of benefits including a strong retirement plan, tuition reimbursement, comprehensive healthcare, support for working parents and Flexible Time Off (FTO) so you can relax, recharge and be there for the people you care about. Overview Join our global team of cyber security experts, protecting our business and developing exciting capabilities on the frontline of cyber defense. Apply your passion and knowledge of cyber security to assist in the investigation of incidents. The Cyber Operations Analyst needs to demonstrate thoughtful knowledge of the evolving cyber threat landscape, BlackRock’s risks, controls and security thresholds and recognize the expertise and importance of differentiated roles within the SOC. More specifically, the Analyst will support the global Cyber Operations function and have following key responsibilities: BlackRock is committed to building great Cyber Security careers for our people, and we are looking for an individual with a passion for cyber security defense to continue the growth of our exceptional team. Our hybrid work model BlackRock’s hybrid work model is designed to enable a culture of collaboration and apprenticeship that enriches the experience of our employees, while supporting flexibility for all. Employees are currently required to work at least 4 days in the office per week, with the flexibility to work from home 1 day a week. Some business groups may require more time in the office due to their roles and responsibilities. We remain focused on increasing the impactful moments that arise when we work together in person – aligned with our commitment to performance and innovation. As a new joiner, you can count on this hybrid model to accelerate your learning and onboarding experience here at BlackRock. BlackRock's purpose is to help more and more people experience financial well-being. As a global investment manager and a leading provider of financial technology, our clients—from grandparents, doctors, and teachers to large institutions—turn to us for the solutions they need when planning for their most important goals. People join our firm from around the world to gain real-world experience while making an impact. Discover how you can have a career at BlackRock that's exciting, rewarding and full of possibilities.

Requirements

4+ years of experience in security operations center, or similar security technical and operational role is preferred.
University Degree. MBA, CISSP, CISM, GCHI, CEH, CCNA, or GIAC are preferred.
Action-oriented attitude and willingness to roll up sleeves.
Intermediate knowledge in system security architecture and security solutions – IDS, Splunk, data loss prevention, next generation anti-malware, etc.
Intermediate knowledge of networking fundamentals (TCP/IP, Network Layers, etc.).
Intermediate knowledge of malware operation and indicators.
Intermediate knowledge of current threat landscape (threat actors, APT, cyber-crime, etc.).
Intermediate knowledge of security related technologies and their functions (IDS, IPS, FW, WAF, SIEM, DLP, Proxy, next gen anti-malware etc.).
Intermediate knowledge of Windows and Unix or Linux.
Intermediate knowledge of Firewall and Proxy technology.
Intermediate knowledge of malware operation and indicators.
Intermediate knowledge of penetration techniques.
Advanced event analysis leveraging SIEM tools.
Advanced incident investigation and response skill set.
Advanced log parsing and analysis skill set.
Advanced knowledge of ServiceNow a plus.
Strong oral and written communication skills.
Attention to detail.
Strong organizational skills.
Experience with scripting.
Knowledge of forensic techniques.
Integrity and the highest ethical standards.
Rapidly assimilates complex data and information and displays a developed learning agility.
Self-starter with the personal drive to achieve superior performance.
Courage of convictions and the ability to respectfully debate the status quo.
Natural curiosity and desire to always learn.

Responsibilities

Acts as an escalation point for regional information security incidents and support the response to incidents impacting the region and/or occurring during regional business hours.
Performs daily review of reports and alerts to identify Information Security events for further investigation while escalating exceptional events as necessary.
Act as a mentor for more junior team members.
Performs investigation and escalation for complex or high severity security threats or incidents.
Ensures that all identified events are promptly validated and thoroughly investigated.
Collaborates with technical teams to identify, resolve, and mitigate events.
Provides advice and guidance on the response action plans for information risk events and incidents based on incident type and severity.
Assists with containment of threats and remediation of environment during or after an incident.
Regularly develop new and interesting use cases for future SIEM logic.
Participate in cyber threat hunts in support of the global cyber operations function.
Assist with forensics investigations.
Participate in the creation, modification and maintenance of all Cyber Monitoring policies and procedures.
Keep abreast of cyber security trends and the emerging threat landscape in general and as it relates to BlackRock.
Deliver timely and detailed documentation related to any incident including the findings, review and follow-up activities.