Information Security Consultant, Digital Forensics & Incident Response

MassMutual Financial Group•New York, NY

65d•Remote

About The Position

The Digital Forensics & Incident Response (DFIR) team is part of our Security Operations Center (SOC) - MassMutual's internal security monitoring, detection and response organization tasked with the detection and response to threats on the firm's network. We are looking for a strong cyber security professional to add to a highly technical security team - someone with a combination of experience and education in cyber incident response, threat detection and response, digital forensics, and red team blue team support. As a member of the DFIR team, you will work in close collaboration with fellow security analysts, engineers, and other IT security specialists throughout the firm including the Security Operations Center, Threat Intelligence, Offensive Security, Security Platforms Support, Network Security Engineering, Endpoint Security and IAM teams

Requirements

Bachelor's degree
8+ years experience in Cyber Security Incident Response or related field
Ability to work M-F 3pm-11:30pm Eastern Time schedule

Nice To Haves

The ideal candidate will have a well-rounded understanding of endpoint, network and cloud defenses and detection methodologies, forensics, and incident response.
They will also have some offensive security experience to allow the ability to think like an adversary.
Successful candidates will have experience in one or more of the following areas:
Incident handling, to include experience conducting or managing incident response from small scale to large event coordination in a complex enterprise environment
Endpoint & network forensic analysis, to include analysis of relevant logs and data, and background using a variety of forensic analysis tools
Offensive security, with the ability to think like an adversary when threat hunting and responding to incidents
Threat detection and response, to include the ability to identify gaps in alerting and development of new alert logic
Knowledge of current security threats, techniques, and landscape
Ability to take a security event, perform analysis to help understand the context and piece together the overall narrative of a potential compromise.
Experience with system administration in a large enterprise environment, including Windows, macOS and Linux servers and workstations, network administration, cloud administration
GCIH, GCFA, GCFE, GREM SANS Certifications helpful
Experience with penetration testing labs (such as Hack the Box, or Capture the Flag challenges)
Ability to perform static and dynamic malware analysis to understand the nature of malware
BA or BS Computer Science, or a college degree in Cyber Security related field
passion to learn, as well as a dedication and self-driven desire to keep abreast of latest cybersecurity threats and hacking techniques
advanced problem-solving skills, and the desire to get your hands dirty
strong verbal, written, and interpersonal communication skills
strong project management skills

Responsibilities

Investigate various types of cyber security incidents
Conduct detailed endpoint and network forensic data analysis as part of an investigation
Develop new detection capabilities to identify malicious activity
Take on specialized projects to enhance our capabilities and security toolsets
Perform in depth malware analysis
Mentor junior security analysts and help them to acquire new security skills

Benefits

regular collaboration with the Security Operations Center
focused one-on-one time with your manager
access to learning content on Immersive, InfoSkills and SANS as well as other informational platforms
your ethics and integrity will be valued by a company with a strong and stable ethical business with industry leading pay and benefits

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume