高级事件响应工程师
Senior Incident Response Engineer
你是否正在寻找一个独特的网络安全岗位,通过提供对新威胁、漏洞和缓解技术的关键洞察和研究来发挥作用?
你是否认为自己是威胁检测领域的创新者?
职位描述:你将作为我们全球信息安全组织事件响应团队中级别最高的技术成员被委以重任
团队介绍:这个全球团队通过处理升级问题和技术控制评估,为信息安全部门的目标和任务提供支持,同时在新威胁、漏洞和缓解技术方面提供关键洞察和研究
主要职责:
- 帮助提升安全保护和缓解技术与流程的弹性与准备度,以高效的方式确保组织资产、信息、数据和IT服务的机密性、完整性和可用性。
- 开发并执行安全事件响应计划,对物理终端和云平台进行网络犯罪调查,独立领导所有报告的安全事件的完整生命周期调查。
- 编写全面的事件报告和调查摘要。开发并收集情报,主动检测并识别对品牌、服务基础设施和企业用户及系统的高置信度威胁。
- 分析/验证安全控制需求和调整,定义缓解规则,编写脚本并执行更改或缓解攻击,并协助解决与安全检测或保护技术相关的任何问题。
- 协助审查现有工具、应用程序和流程,以帮助加强和优化当前的安全能力,同时识别任何差距或技术解决方案以进一步提高团队效率。
- 领导对安全事件的分析和审查,发现异常活动,与相关同行团队合作采取适当措施,保护公司信息资产免受当前和预见的威胁。
要求
- 具备云无关基础设施安全的高级知识
- 能够开展取证和事件响应调查。了解事件响应和风险缓解的工作流程和规划
- 能够参与安全事件的分析以发现异常活动。识别新兴安全威胁
查看英文原文
Are you looking for a unique Cyber Security role whereby you will provide key insight and research into new threats, exploits, and mitigation techniques?
Do you consider yourself a innovator in threat detection?
About the role: You will be entrusted as the senior most technical member of incident response team for our global information security organization
About the team: This global team supports the Information Security department’s goals and objectives by addressing escalations, and evaluation of technology controls providing key insight and research in new threats, exploits, and mitigation techniques
Key Responsibilities:
- Helping improve the resilience and readiness of security protection and mitigation technologies and processes which ensure the confidentiality, integrity, and availability of the organization’s assets, information, data, and IT services in an efficient manner.
- Developing and execute security incident response plans, conduct cyber forensic investigations on physical endpoints and cloud platforms, independently lead the full life-cycle of incident response investigations of all reported security incidents.
- Developing comprehensive incident reports and investigation summaries. Develop and collect intelligence to proactively detect and identify high-confidence threats to the brand, service infrastructure and enterprise users and systems.
- Analyzing/validating security control requirements and tuning, defining the mitigation rules, scripting and performing changes or mitigating attacks, and assisting with troubleshooting support related to any issues which may arise from security detection or protection technologies.
- Assisting with reviewing existing tools, applications, and processes to help strengthen and optimize current security capabilities, as well as identifying any gaps or technical solutions to further enhance the team’s effectiveness.
- Leading analysis and review security events for anomalous activity, collaborate with respective peer groups to take appropriate action to safeguard company information assets against current and foreseen threats.
Requirements
- Possess advanced knowledge of security of cloud agnostic infrastructure.
- Have the ability to conduct forensic and incident response investigations. Understanding of incident response and risk mitigation workflow and planning.
- Able to participate in the analysis of security events for anomalous activity. Identification of emerging security threats.
- Able to develop and implement security improvement and remediation programs.
- Possess vulnerability assessment, exploitation techniques, malware reverse engineering, threat analysis, and security threat and incident reporting.
- Able to participate in the investigation and navigation in Cloud and Web-based environments.
- Possess any of the following Licensing/certification : CCFE, GCFE, CISSP, CISM, SANS, GIAC, ISACA, CSRIC (or related), ethical hacking/penetration tester certification, and/or security risk assessment certification
Elsevier is a renowned global information analytics company that primarily focuses on providing scientific, technical, and medical (STM) research content, tools, and services. It is one of the largest publishers of academic journals and scholarly literature in the world.
Elsevier operates in various domains, including science, technology, medicine, social sciences, and more. They publish a vast number of peer-reviewed journals covering a wide range of disciplines. These journals act as platforms for researchers and academics to share their findings and contribute to the advancement of knowledge in their respective fields.
In addition to publishing, Elsevier offers a suite of digital solutions and services to support researchers, scientists, and professionals in their work. They provide online platforms like ScienceDirect, Scopus, and Mendeley, which offer access to a vast repository of scholarly articles, research papers, and other scientific content. These platforms often serve as essential resources for software developers seeking to stay updated with the latest scientific advancements.
Primary Location Base Pay Range: Home based-New Jersey $89,012 - $142,188. U.S. National Base Pay Range: $78,800 - $131,300. Geographic differentials may apply in some locations to better reflect local market rates.This job is eligible for an annual incentive bonus.We know your well-being and happiness are key to a long and successful career. We are delighted to offer country specific benefits. Click here to access benefits specific to your location.
We are committed to providing a fair and accessible hiring process. If you have a disability or other need that requires accommodation or adjustment, please let us know by completing our Applicant Request Support Form or please contact 1-855-833-5120.
Criminals may pose as recruiters asking for money or personal information. We never request money or banking details from job applicants. Learn more about spotting and avoiding scams here.
Please read our Candidate Privacy Policy.
We are an equal opportunity employer: qualified applicants are considered for and treated during employment without regard to race, color, creed, religion, sex, national origin, citizenship status, disability status, protected veteran status, age, marital status, sexual orientation, gender identity, genetic information, or any other characteristic protected by law.
USA Job Seekers:
EEO Know Your Rights.
Originally posted on Himalayas