Principal Incident Response Analyst

Centene Corporation•Remote-IL, IL

1d•$121,500 - $224,900•Hybrid

About The Position

You could be the one who changes everything for our 28 million members by using technology to improve health outcomes around the world. As a diversified, national organization, Centene's technology professionals have access to competitive benefits including a fresh perspective on workplace flexibility. Position Purpose: Executes enterprise-wide Incident Response Plan and recommends enhancements to improve security. Partners with business units to accomplish enterprise-wide remediation and develops and delivers presentations to senior leadership team. Keeps abreast of security breaches and ensure incident and response management processes are initiated Implements security service audit schedules, review access authorization, and perform the required access controls testing to identify security shortfalls Automated scripts, contingency plans, and other programmed responses which are launched when an attack against Centene’s systems has been detected Collaborates with Information Security Architects, Information Security Engineers, and software or hardware stakeholders at Centene Ties third party attack monitoring services and threat reporting services, into internal CIRT (Cyber Incident Response Team) communications systems Performs other duties as assigned Complies with all policies and standards

Requirements

A Bachelor's degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science) and requires deep functional and Centene specific knowledge with 6 – 8 years of related experience. Or equivalent experience acquired through accomplishments of applicable knowledge, duties, scope and skill reflective of the level of this position.

Nice To Haves

Knowledge of Other: Tools, techniques and processes (TTP) used by threat actors
Knowledge of Other: Indicators of compromise (IOC)
Experience with Other: Endpoint protection and enterprise detection & response software (such as CrowdStrike or Carbon Black)
Knowledge of Other: Network and infrastructure technologies including routers, switches, firewalls, etc.
Advanced - Seeks to acquire knowledge in area of specialty
Advanced - Ability to identify basic problems and procedural irregularities, collect data, establish facts, and draw valid conclusions
Advanced - Ability to work independently
Advanced - Demonstrated analytical skills
Advanced - Demonstrated project management skills
Advanced - Demonstrates a high level of accuracy, even under pressure
Advanced - Demonstrates excellent judgment and decision making skills
Advanced - Ability to communicate and make recommendations to upper management
Advanced - Ability to drive multiple projects to successful completion
Advanced - Possesses technical aptitude

Responsibilities

Executes enterprise-wide Incident Response Plan and recommends enhancements to improve security.
Partners with business units to accomplish enterprise-wide remediation and develops and delivers presentations to senior leadership team.
Keeps abreast of security breaches and ensure incident and response management processes are initiated.
Implements security service audit schedules, review access authorization, and perform the required access controls testing to identify security shortfalls.
Automated scripts, contingency plans, and other programmed responses which are launched when an attack against Centene’s systems has been detected.
Collaborates with Information Security Architects, Information Security Engineers, and software or hardware stakeholders at Centene.
Ties third party attack monitoring services and threat reporting services, into internal CIRT (Cyber Incident Response Team) communications systems.
Performs other duties as assigned.
Complies with all policies and standards.