Analyst, Cybersecurity DFIR

Job Description

Job Description: Job Purpose The ICE Cybersecurity DFIR team is responsible for defending critical financial infrastructure from Global Cyber threats. We leverage an evolving arsenal of controls that require technical proficiency as well as tenacity, professionalism, and strong communication skills. Responsibilities Email Triage - Evaluating staff reported emails for malicious intent Data Loss Prevention - Reviewing Daily DLP events for evidence of internal information leaving the network Operations - Handling end user support requests. Some examples of end-user requests: unblocking websites, permitting file uploads, modifying anti-virus policies, and testing email attachments. Incident Management – Detect, document, investigate, and resolve security incidents in an efficient manner Intrusion Detection - Develop and tune anomaly detection capability to produce reliable actionable data Behavioral Analysis - Develop and implement criteria to identify anomalous user behavior leading indicating insider threat activity Desirable Knowledge and Experience University degree in Engineering, CIS, or related discipline Hands-on experience with Systems Administration Deep understanding of networking and its application Relevant Information Security experience Advancement Opportunity Seniority is determined by experience and demonstration of exceptional competencies including: Automation - Automating simple tasks using python increasing efficiency and continuity Counter Measures - Ability to design and implement preventative and corrective controls to counteract emerging threats Security Analytics - Efficiently distill actionable information from large data sets for reporting, hunting, and anomaly detection Proactive Threat Hunting - Develop and execute focused plans to discover advanced threats that evade traditional security controls Serve as a responsible Subject Matter Expert (SME) on one or more tools or technologies via learning, testing, implementing, enhancing, and educating.