Incident Response Analyst

• Responsible for handling day-to day operations to monitor, identity, triage and investigate security events from various Endpoint (EDR), Network and Cloud security tools and detect anomalies, and report remediation actions

• Analyze firewall logs, server, and application logs to investigate events and incidents for anomalous activity and produce reports of findings

• Conduct reviews and analysis of proxy logs, Microsoft Windows and Active Directory logs, and malicious code to identify, contain, eradicate, and ensure recovery from incidents

• Help create and maintain process tools and documentation

• Perform all stage of incident response from detection to postmortem

• Collaborate with stakeholders in building and improving our Security Orchestration Platform

• Clearly document notes for incidents in our case management solution

• Perform basic forensics and malware analysis based on our playbooks and procedures

• Responsible for working in a 24/7 environment including night shifts and the shifts are decided based on the business requirement

• Maintain a high level of confidentiality and Integrity

Minimum Qualifications:

• BS in Computer Science, Information Security, or equivalent professional experience

• 2+ years of cyber security experience in incident response

• Technical depth in one or more specialties including: Malware analysis, Host analysis and Digital forensics

• Strong understanding of Security Operations and Incident Response process and practices

• Experience performing security monitoring, response capabilities, log analysis and forensic tools

• Strong understanding of operating systems including Windows, Linux and OSX

• Experience with SIEM, SOAR, EDR, Network, AWS, and Azure security tools

• Excellent critical thinking and analytical skills, organizational skills, and the ability to work as part of a team

• Excellent verbal and written communication skills

• Ability to design playbooks for responding to security incidents

• Ability to support off-hours, weekends, and holidays if needed in support of incident response

Preferred Qualifications:

• Advanced interpersonal skills to effectively promote ideas and collaboration at various levels of the organization

• One or more security-related certifications from any of the following organizations: GCIH, GCFE, GCFA, AWS, Azure Cloud security Certifications or equivalent is desired

#LI-PJ1

Learn More

About Autodesk

Welcome to Autodesk! Amazing things are created every day with our software - from the greenest buildings and cleanest cars to the smartest factories and biggest hit movies. We help innovators turn their ideas into reality, transforming not only how things are made, but what can be made.

We take great pride in our culture here at Autodesk - it's at the core of everything we do. Our culture guides the way we work and treat each other, informs how we connect with customers and partners, and defines how we show up in the world.

When you're an Autodesker, you can do meaningful work that helps build a better world designed and made for all. Ready to shape the world and your future? Join us!

Salary transparency
Salary is one part of Autodesk's competitive compensation package. Offers are based on the candidate's experience and geographic location. In addition to base salaries, our compensation package may include annual cash bonuses, commissions for sales roles, stock grants, and a comprehensive benefits package.

Diversity & Belonging
We take pride in cultivating a culture of belonging where everyone can thrive. Learn more here: https://https://www.autodesk.com/company/diversity-and-belonging

Are you an existing contractor or consultant with Autodesk?

Please search for open jobs and apply internally (not on this external site).