Yoh has an exciting, full-time opportunity for a Incident Response Analyst to join our Finance client. This opportunity is ideal or candidates with 5+ years of Incident Response experience, strong knowledge Digital Forensics and Incident Response (DFIR), and live within a commutable distance to the office in Fremont, CA for a hybrid work environment.
See below for abbreviated job responsibilities and requirements. If after reviewing, you are interested in learning more about this, or other IT opportunities, please apply with your updated resume ASAP.
Title: Incident Response Analyst
Type: Contract
Industry: Finance
Pay: $70/hr - $80/hr
Responsibilities:
Take a proactive approach in identifying and evaluating potential threats to users, network, and data.
Monitor and promptly respond to reports of malicious activity, investigating intrusions and security events.
Demonstrate a comprehensive understanding of the threat landscape and conduct thorough analyses of attacks and unusual network behavior.
Provide both concise and detailed analysis and documentation.
Conduct proficient forensic analysis utilizing security tools and established processes.
Process Threat Intelligence (TI) to identify actionable intelligence, showcasing the ability to recognize, contain, eradicate, and recover from security incidents.
Collaborate with business units, partners, and individuals to mitigate security threats.
Offer guidance to the CISO and ESEC Team on organizational, strategic, tactical, and security best practices concerning forensics and security incident management.
Attend meetings and represent ESEC as a Senior Lead for all security matters.
Take a lead, co-lead, or backup role on assigned ESEC projects. Mentor junior staff colleagues and develop Standard Operating Procedures and training documents.
Perform other duties as assigned.
Requirements:
Possess a minimum of 5+ years of technical experience in conducting security incident response and forensic analysis.
Experience with Digital Forensics and Incident Response (DFIR) preferred.
Have practical experience in obtaining Cyber Threat Intelligence and incorporating it effectively into the security incident process.
Apply Indicators of Compromise (IOCs) to identify threats in the current environment and use this information to prevent future vulnerabilities in the infrastructure.
Utilize best practices standards and frameworks, including ISO 27001/27002, PCI DSS v4, GLBA, HIPAA/HITECH, NIST 800-53, CIS CONTROLS, NIST CSF, and CIS RAM.