Senior Analyst, Information Security

Molina Healthcare•Long Beach, CA

About The Position

Provides senior level analyst support for information security activities. Responsible for a wide range of security issues including architectures, electronic data traffic, and network access, and applies current computer science technologies to the design, development, evaluation, and integration of computer systems and networks to maintain system security. Collaborates with commercial computer product vendors in the design and evaluation of state-of-the-art secure operating systems, networks, and database products. Provides security engineering and integration services to internal customers.

Requirements

At least 4 years experience in computer science or information security, or equivalent combination of relevant education and experience.
Experience with hands-on penetration testing against Windows, wireless, Unix, or web application targets.
Experience administering and utilizing enterprise Endpoint Detection and Response (EDR) platforms (Tanium, Cisco Advanced malware protection (AMP), Crowdstrike).
Applied knowledge in at least one scripting or development language (i.e. Python).
Extensive understanding of enterprise security controls in Active Directory/Windows environments.
Experience with Windows disk and memory forensics.
Experience with Unix or Linux disk and memory forensics.
Experience with Network Security Monitoring (NSM), network traffic analysis, and log analysis.
Experience with static and dynamic malware analysis.
Ability to document and explain technical details in a concise, understandable manner.
Strong analytical and problem-solving skills.
Strong documentation abilities.
Ability to work independently and as part of a team.
Strong attention to detail and commitment to confidentiality.
Strong verbal and written communication skills.
Microsoft Office suite/applicable software program(s) proficiency.

Nice To Haves

Global Information Assurance Certification (GIAC), Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst Certification (GCIA), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Forensic Examiner (GCFE), or GIAC Reverse Engineering Malware (GREM).
Experience with programming/scripting languages.
Background in operational information security disciplines (e.g. incident response, security infrastructure management or monitoring services).
Background performing incident response and digital forensics.
Experience in configuration management of feeds into event aggregation and correlation systems (e.g., Exabeam, Splunk).
Experience with improvement of analyst effectiveness by optimizing signature quality in collaboration with other analysts and developers.
Background in systems administration for Windows and/or nix based environments.
Familiarity with host-based security tools (e.g., EnCase, Forensic Toolkit, Enterprise Compromise Assessment Tool (ECAT), Volatility, Memory Forensics).
Services: Hypertext Transfer Protocol (HTTP), Hypertext transfer protocol secure (HTTPS), Domain Name System (DNS), Dynamic Host Configuration Protocol (DHCP), File Transfer Protocol (FTP), Simple Mail Transfer Protocol (SMTP), etc.

Responsibilities

Leverages deep understanding of security controls to detect, contain, and remediate threats to the network infrastructure; applies forensics, log analysis, and malware triage skills to solve advanced threats discovered on the Molina network.
Conducts host and network-based forensics, log analysis, and malware triage in support of incident response investigations.
Performs digital hunting to detect threats that may already have a foothold inside the network.
Utilizes cutting edge technology and processes to conduct large-scale investigations and examine endpoint and network-based sources of evidence.
Recognizes and quantifies attacker tools, tactics, and procedures in indicators of compromise (IOCs) that can be applied to current and future investigations.
Creates scripts, tools, or methodologies to enhance Molina's incident investigation processes.
Collaborates with security and information technology (IT) operations to implement remediation plans in response to incidents.