Sr. Security Ops Analyst- Incident Response

TAXWELL • Haverford, PA

81d

About The Position

Taxwell helps everyday Americans get every tax advantage they deserve by finding credits and deductions they never even knew existed. Our tax preparation software offers easy guidance and ensures your maximum tax refund. We strive to build a team of like-minded experts in both tax and technology who align with our brand purpose, are advocates for our customers and have a fresh, non-traditional approach to the tax industry. The Sr. Security Ops Analyst/Incident Response role is a part of the Taxwell IRM team. IRM SecOps provides cyber security monitoring, reporting, and response along with detection capabilities and threat hunting.

Requirements

• Bachelor's degree or equivalent combination of CISSP certification and prior experience.
• Five or more years of experience in information systems security.
• Good communication skills to interact with clients, team members, management, and support personnel.
• Good analytical and problem-solving skills.
• Ability to work independently and as part of a team, be highly self-motivated.
• Experience with cloud environments, such as Microsoft Azure and Amazon Web Services; Container services and Kubernetes; Azure Monitor and/or Sentinel.
• Experience with AD and Entra ID; Mimecast and Microsoft Purview; Microsoft OpenAI Services; AWS technologies such as EC2, ECS, Lambdas, LightSail, and VMware Cloud.
• Ability to script in PowerShell, Python.

Nice To Haves

• Previous expertise in consulting or finance, tax background desirable.
• Preferred experience with EDR solutions such as Defender XDR and CrowdStrike Falcon.
• Experience in Data Visualization (example: PowerBI).
• Preferred experience with Splunk and osquery.
• GIAC GCFA and/or GCFR certification.

Responsibilities

• Receive incident escalations from monitoring team and assist with real-time advanced analysis, response, and reporting.
• Mentor and assist in training analysts to aid in their skills development and analytical capabilities.
• Proactively hunt for threats and enact identification, containment, and eradication measures while supporting recovery efforts.
• Act as the point person for coordination with appropriate parties during a security incident – client, management, legal, security, operations, etc.
• Create thorough reports and documentation of all incidents and procedures, presenting findings to team and leadership on a routine basis.
• Support detection capabilities and refine processes through alert validation.
• Perform threat hunting and proactive incident response.
• Complete follow-through to ensure quality forensic materials are captured, preserved, and documented along with details and timelines of events and recommendations to avoid future occurrences.
• Assist in the general maintenance and improvement of processes and/or playbooks.
• Conduct research regarding the latest methods, tools, and trends in digital forensics analysis.
• Conduct analysis using logs, previous alerts, etc. to identify trends to identify and prevent potential incidents.
• Ingest data from multiple sources and aggregate client metrics.

What This Job Offers

• Career Level: Senior
• Education Level: Bachelor's degree
• Number of Employees: 51-100 employees