Lead, Incident Response

Prudential Financial•Newark, NJ

About The Position

Prudential’s Global Technology organization supports customers and employees worldwide through customer-driven solutions and digital transformation. Its Cyber Defense & Response (CDR) team is a global team responsible for incident response and investigations across Asia, Europe, and the Americas. The Digital Forensics & Incident Response Lead is an individual technical contributor who conducts digital forensic and incident response analysis, responds to security incidents, assists with threat hunting, performs incident readiness activities, and completes related cybersecurity work in a dynamic global corporate environment. The role conducts enterprise-wide investigations across on-premises and cloud technologies, performs forensic analysis, supports stakeholders and business leaders with investigative findings, and helps advance the team’s response capabilities.

Requirements

At least 5 years of experience responding to cyber incidents in large corporate or enterprise environments.
Bachelor’s degree in Digital Forensics, Information Security, Computer Science, Information Technology, or a related discipline.
Experience using enterprise forensic software suites such as X-Ways or EnCase.
Knowledge of common scripting languages such as Python, PowerShell, or Bash.
Comprehensive understanding of adversarial threat frameworks such as MITRE ATT&CK and Lockheed Martin’s Cyber Kill Chain.
Strong verbal and written communication skills.

Nice To Haves

Industry-standard certifications such as CCE, EnCE, GCFE, GCFA, GCIH, GREM, GNFA, or GPEN.

Responsibilities

Scope and conduct global, enterprise-wide investigations across on-premises and cloud technologies, including Active Directory/Entra, M365, Azure, and AWS.
Use Splunk Search Processing Language (SPL) and Microsoft Kusto Query Language (KQL) to support investigative workflows.
Use endpoint detection and response (EDR) tooling for enterprise-wide investigations and analysis.
Perform log, host, memory, and network-based forensics during active investigations.
Perform malicious code triage in support of incident response.
Communicate key investigative details to stakeholders and business leaders globally.
Collaborate closely with technical stakeholders during active investigations.
Develop scripts, queries, and automation workflows in support of XSOAR.
Lead and contribute to team projects that advance enterprise forensic and incident response capabilities.
Assist with threat hunting operations and perform incident readiness activities.

Benefits

Market-competitive base salary with yearly bonus potential at every level.
Medical, dental, vision, life, and disability insurance.
Paid Time Off (PTO) and leaves of absence, including parental and military leave.
401(k) plan with company match up to 4%.
Company-funded pension plan.
Wellness programs, including up to $1,600 per year in reimbursement for eligible personal wellbeing purchases.
Work/life resources for parenting, housing, senior care, finances, pets, legal matters, education, emotional and mental health, and career development.
Education benefit to help finance approved college enrollment and accredited certificate programs.
Employee Stock Purchase Plan, allowing eligible shares to be purchased at 85% of the lower of the beginning or ending purchase-period price.
Potential eligibility for a discretionary annual incentive program, subject to program rules and applicable factors.