Info Sec Incident Response Specialist

TIAA • Charlotte, NC

1d • $77,200 - $90,700

About The Position

The Information Security Incident Response Specialist investigates and analyzes response activities related to cyber incidents within the network environment. Under general supervision, the role monitors systems, networks, and user activity to prevent and reduce cybersecurity incidents. It also assesses cloud platform and infrastructure options, including their feasibility, potential organizational value, and cost-effectiveness compared with alternatives.

The position supports the organization's global IT strategies and initiatives, identifies vulnerabilities and risks, and performs or assists with incident response, penetration testing, and forensics. It monitors designated networks, enclaves, and systems; evaluates user activity for possible privilege abuse or unauthorized access; and interprets, analyzes, and reports events in accordance with computer network directives.

Requirements

• At least 2 years of work experience.
• Knowledge or skills related to accountability, adaptability, business continuity planning, cloud computing security, collaboration, communication, compliance, consultative communication, cybersecurity, attention to detail, general risk management, network security, and effective prioritization.

Nice To Haves

• University degree preferred.
• At least 3 years of work experience preferred.

Responsibilities

• Collect data from IT security tools, including intrusion detection system alerts, firewall and network traffic logs, and host system logs.
• Assess the technical feasibility of adopting external cloud-based IT platform and infrastructure services.
• Identify areas of the organization's IT platform or infrastructure with the greatest potential return from cloud deployment.
• Help implement global strategies and initiatives that enhance IT plans, operations, and procedures.
• Scan for security vulnerabilities and potential risks, and take measures to prevent and reduce cybersecurity incidents.
• Analyze potential risks, vulnerabilities, and malware; perform penetration testing and assist with forensics as needed.
• Monitor designated networks, enclaves, and systems.
• Evaluate user activity to determine whether it is consistent with the user's responsibilities or may involve privilege abuse or unauthorized access.
• Interpret, analyze, and report events and anomalies in accordance with computer network directives, including initiating, responding to, and reporting discovered events.
• Execute first-level responses and address reported or detected incidents.
• Distribute directives and vulnerability and threat advisories to identified consumers to help resolve potential threats.
• Evaluate the costs and benefits of cloud solutions compared with virtual private networks, dedicated hosting, and in-house solutions.

Benefits

• Superior retirement program.
• Health, wellness, and work-life offerings.
• Comprehensive Total Rewards package supporting physical, emotional, and financial well-being.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level