Principal Incident Response Analyst

Centene Corporation

1d•Hybrid

About The Position

This position will work as an Incident Commander/Coordinator for activities that require an issuance of the enterprise-wide Incident Response Plan. The individual selected for this position will recommend enhancements found through after-action reporting or pro-active threat hunts. Outstanding communication skills will be essential with this job role, constant updates and recommendations will be briefed with leadership from multiple business units. The role involves keeping abreast of security breaches and ensuring incident and response management processes are initiated. Collaboration with Information Security Architects, Information Security Engineers, and software or hardware stakeholders at Centene is key. The analyst will also tie third party attack monitoring services and threat reporting services into internal CIRT (Cyber Incident Response Team) communications systems. Strong written and verbal communication skills are required. The position also involves performing other duties as assigned and complying with all policies and standards.

Requirements

A Bachelor's degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science) or equivalent experience acquired through accomplishments of applicable knowledge, duties, scope and skill
6 – 8 years of related experience
Deep functional and Centene specific knowledge
Knowledge of tools, techniques, and processes (TTP) used by threat actors
Knowledge of Indicators of compromise (IOC)
Experience with Endpoint protection and enterprise detection & response software (such as CrowdStrike or Carbon Black)
Knowledge of network and infrastructure technologies including routers, switches, firewalls, etc.
Experience with cloud infrastructure and security best practice
Experience with Cloud Detection and Response technology
Outstanding communication skills
Strong written and verbal communication skills
Advanced ability to identify basic problems and procedural irregularities, collect data, establish facts, and draw valid conclusions
Advanced ability to work independently
Advanced demonstrated analytical skills
Advanced demonstrated project management skills
Advanced demonstrates a high level of accuracy, even under pressure
Advanced demonstrates excellent judgment and decision making skills
Advanced ability to communicate and make recommendations to upper management
Advanced ability to drive multiple projects to successful completion
Advanced possesses technical aptitude

Responsibilities

Work as an Incident Commander/Coordinator for activities that require an issuance of the enterprise-wide Incident Response Plan
Recommend enhancements found through after-action reporting or pro-active threat hunts
Brief leadership from multiple business units with constant updates and recommendations
Keep abreast of security breaches and ensure incident and response management processes are initiated
Collaborate with Information Security Architects, Information Security Engineers, and software or hardware stakeholders at Centene
Tie third party attack monitoring services and threat reporting services into internal CIRT (Cyber Incident Response Team) communications systems
Perform other duties as assigned
Comply with all policies and standards