Incident Response Lead

B&H Photo Recruiting Department•New York, NY

2d•$134,800 - $168,500

About The Position

An IR analyst L3 is responsible for the daily operations of IR alerts/tickets, triaging, investigating, and escalating security alerts and incidents, managing IR tools and services, and supporting the overall IR program. These responsibilities are designed to support the identification of and response to cyberthreats affecting B&H systems and assets in a timely manner.

Requirements

Extensive knowledge of IT networking (TCP/IP, firewalls, IDS/IPS, routing, etc.), logging (syslog, auditd, window’s event log, etc.), security tooling (A/V, EDR, email security, vulnerability scanners, etc.), ticketing systems (JIRA, HP Service Now, remedy, etc.) and security principles (CIS top 18, NIST, incident response frameworks, etc.)
Experience with threat hunting and operating system malware analysis.
Ability to lead a collaborative team while building inter-departments support.
Excellent communication and writing skills.
Strong analytical and troubleshooting skills.
Attention to detail and curiosity to learn new skills.
Self starter and able to manage multiple competing priorities.
Experience preparing and presenting incident reports

Nice To Haves

Relevant certifications, such as CompTIA Security+, CySe+, GCIH, GSOC, GMON, CEH, SSCP, or CISSP are a plus.

Responsibilities

Monitor and respond to security events and incidents using established processes and tools
Investigate the root cause, scope, impact, and remediation of security incidents
Manage daily operations of reviewing and responding to IR alerts including but not limited to SIEM, EDR, DLP, FW, and WAF alerts.
Provide direction and guidance to incident responders and analysts
Manage daily operations responsibilities for the operations and support of IR tools and services.
Act as the Incident Lead during significant security events.
Conduct and participate in incident response training and exercises
Upkeep and development of IR documentation
Support the overall B&H IR program.
Provide monthly reporting for the IR function.
Assisting with security projects, tasks, and other initiatives
Support overall IS Security initiatives.