IT Senior Analyst, Cyber Defense and Response (Hybrid)

Eversource Energy•Berlin, CT

13d•Hybrid

About The Position

Works in the Eversource Security Operations Center (SOC) which is responsible for managing and protecting computer assets, networks and information systems. This position will act as a point of contact for proper handling of Information Security incidents and provide remediation actions as required. This position also monitors and audits information systems to confirm information security policy compliance and provides management with security policy compliance assessments and system monitoring reports. To accomplish these tasks must have an extensive understanding of digital investigations, and underlying principles of networking, infrastructure and system integration. In addition, provides technical expertise to key security tools and software. This includes requirements in the planning, coordination, programming, and implementation of releases, upgrades or changes to security system software and hardware.

Requirements

Strong working knowledge of information systems security standards and practices
Bachelor’s degree in Information Systems, related technical degree or equivalent experience
Minimum of five (5) years of experience in the field of information security
Experience with two or more of the following required: - Security Monitoring; database security, policies and procedures, active directory, cryptography/PKI, application security assessments, risk assessments, network security, security awareness or related information security subject area

Nice To Haves

Two or more SANS incident response or forensics security certifications strongly preferred – ex. GCIH, GCIA
Current or former Top-Secret clearance strongly preferred

Responsibilities

Performs Incident Response functions for the SOC team to ensure incidents are handled appropriately to minimize risk and impact to the company.
Analyzes and processes case work relating to computer security vulnerabilities, phishing, malware, and forensic investigations
Ability to anticipate and respond to changing priorities, and operate effectively in a dynamic demand-based environment, requiring extreme flexibility and responsiveness
Leads security incidents to ensure timely mitigation and remediation efforts are completed
Preserves, harvests, and processes electronic data according to company policies and regulatory requirements.
Participates in forensic investigations as required, to include the collection, preservation of electronic evidence, analysis, and creation of a final report
Produces high quality oral and written work, presenting complex technical matters clearly and concisely with audiences ranging from peers to Sr. Management
Must be familiar with current and proposed laws, regulations, industry standards, and ethical requirements related to information security and privacy
Recommends effective process changes to enhance defense and response procedures.
Evaluates, tests and selects security tools, evaluation products and control products.
Assists with annual SOX, CIP and SOC assessment and related remediation efforts.