Cyber Operations Engineer III

Conduent•Sandy, UT

9d•Remote

About The Position

You’ll be a part of Conduent Cyber Security Operations team, the Level III CSIRT lead Analyst that will utilize multiple security technologies that allow CSIRT members to work collaboratively and efficiently while responding to threats. As Weekend lead analyst 1st shift (Friday, Saturday, Sunday, Monday) within a 24/7 Cyber Security monitoring environment and you will be responsible for carrying out Security Incident management processes. We need someone who can perform responsibilities associated with investigating Incidents escalated from Level I and II incident responders, conducting technical investigations for security incidents, providing process improvements, and Incident management. You’ll partner with Security Engineers to implement and improve technology and process to enhance CSIRT monitoring, investigation, and response.

Requirements

Bachelor’s Degree from four-year college or university in Information Technology, Information Security/Assurance, Engineering or similar area of study required
Minimum of 3 years of technical experience in Incident Response and Management
Experienced in providing shift leadership and technical guidance to Level I & II Security analysts in a SOC environment.
Advanced knowledge and expertise of using SIEM technologies for event investigation
Experience with incident handling/incident response techniques within a cloud-based environment such as Azure.
Exposure and understanding of audit requirements (PCI, HIPPA, GDPR, etc.)
Any SANS Certification and/or Certified Information Systems Security Professional (CISSP)

Nice To Haves

Certified Incident Handler (GCIH)
Certified Intrusion Analyst (GCIA)
Certified Ethical Hacker (CEH)

Responsibilities

Manage multi-step breach and investigative analysis of advanced threats
Serve as an escalation resource and mentor for other analysts
Work directly with cyber threat intelligence to convert intelligence into useful detection
Work with security partners developing and refining monitoring use cases
Work on complex tasks assigned by leadership, which may involve coordination of effort among Level 1/2/3 analysts
Coordinate evidence/data gathering and documentation and review Security Incident reports
Identify root cause incident and take proactive mitigation
Define required security controls and processes and enforces through the execution of policy documentation, standards, education and awareness, and conducting risk assessments.
Monitor external regulatory requirements and supports compliance and certification activities.
Enforce a defense-in-depth methodology in support of the overall enterprise cyber security risk posture.
Create and develop CSIRT processes and procedures working with Level 2 and Level 1 Analysts