Lead ISSO ensuring security compliance for multi - tenant cloud and hybrid environments at Agile Defense. Responsible for vulnerability analyses and risk management decision - making expertise.
About the role
- Sr. Analyst for Information Security at Edwards Lifesciences focusing on incident response and threat hunting. Contributing to cyber security through detection engineering and operational efforts.
Responsibilities
- Serve as key escalation tier (level 2 analyst) for on-call incident response resources
- Perform complexed investigations as a part of Edwards active security monitoring and threat hunting operations within SLAs
- Drive and design response and remediation actions to protect against security threats in Edwards environments and products
- Lead data ingestion efforts from identifying gaps, onboarding data sources, tuning and correlating them
- Lead the design, testing and implementation of detection use cases to production
- Help drive threat hunting program
- Responsible for operations and maintenance of key cyber security capabilities and services in Detection Response area – SIEM (Google SecOps, Splunk, Qradar etc), Log Collectors (WEF, Cribl, NXLog etc)
- Design automation workflows to streamline detection and response efforts
- As needed, participate in CIRT team efforts
- Provide coaching, mentoring, and knowledge transfer to other team members
- Document and maintain incident response technical playbooks and incident timelines
- Staying informed on the evolving cybersecurity threat landscape to drive innovative detections, threat hunts, and automations to drive Edwards’ security posture
Requirements
- Bachelor's Degree in related field with 4 years of previous related experience, or equivalent work experience based on Edwards criteria
- Previous related experience in Information Security SOC, CIRT or SIEM teams
- Participation and leading information security incident handling efforts
- Provide and build detailed investigation timelines including documentation, improvements, and recommended action items
- Expert with Google SecOps or other SIEM solutions (Splunk, Qradar etc)
- Expert with log collectors' management (WEF, Cribl, NXLog etc), parsing experience
- Experience with SOAR platforms operations (Torq, PaloAlto XSOAR etc)
- Experience with threat hunting operations and/or design
- Certifications in related discipline preferred (e.g., CEH, CISM, CISSP)
- Expert of IR concepts, data tuning, SIEM, forensics, cloud monitoring
- Knowledge of common attack vectors and methods, MITRE framework
- Scripting experience preferred
- Proficient analytical and problem-solving abilities to identify and mitigate potential security risks
- Strict attention to detail
- Ability to partner with other information security and IT experts for escalation of security alerts and onboarding log sources
- Substantial understanding of troubleshooting techniques with the ability to adapt and learn new technologies
- Ability to provide guidance to assigned teams on implementing information security standards and designs
- Excellent organization and time management skills
- Excellent verbal and written communication skills
Benefits
- Health insurance
- Retirement plans
- Paid time off
- Flexible work arrangements
- Professional development
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Network Security Engineer focusing on Fortigate Firewalls for Vodafone's global network operations. Troubleshooting, incident management, and collaborative environments driving network security initiatives.
Security Engineer designing and deploying agentic AI systems that operate within enterprise environments for Capgemini. Collaborating on security engineering and applied AI system development.
Security Officer tasked with ensuring safety and access control at Sutter Health facilities. Providing assistance and investigating incidents, while ensuring a safe environment.
Mid - Level Security Design & Development Specialist at Boeing providing architecture and consultation expertise for enterprise directory services. Collaborating with senior technical experts in a fast - paced environment.
Delivery Lead responsible for end - to - end product delivery in the Physical Security Product Team at Wells Fargo. Collaborating with product managers and teams to foster high performance and customer value within agile frameworks.
Compliance professional managing global regulatory changes and providing advisory support. Joining a dedicated team within State Street, the role offers flexible hybrid work arrangements.
Focus Sales role at api GmbH, engaging clients and supporting Cloud business growth. Collaborate with teams for optimal client service and success in IT products.
Security Engineering Manager leading Detection & Response team at Snap. Overseeing security monitoring and team collaboration on high - impact initiatives.
Mid - Level Security Design & Development Specialist at Boeing involved in directory services infrastructure. Collaborating with a team of senior technical experts in a fast - paced environment.