Senior Security Analyst - Incident Response and Data Analysis and Visualization

The Information Security Office’s (ISO) vision is to realize a culture of security that manages risks, defends against threats, and integrates information security into business and technology. The Global Cyber Security (GCS) Team supports this vision though the detection, analysis, and mitigation of cyber security threats facing EHI. The Digital Forensics and Incident Response (DFIR) Team under GCS is responsible for the coordination and investigation of cyber security incidents, forensic analysis, and forensic data collection in support of EHI business functions. 

As a Senior Security Analyst on the DFIR Team, you will:

• Coordinate resources during a cyber-security event, driving issues to a timely and complete resolution
• Conduct analysis, response, triage, recovery, and improvements for security events affecting Enterprise Holdings
• Perform work in a fast-paced environment utilizing a set of security related tools (e.g. WAF, SOAR, SIEM, UBA, IDS/IPS, anti-virus, firewalls, etc.), developing new team processes, verifying/testing new monitoring tools, and working with internal/external teams on security issues
• Use data to aid in decision-making by not only looking at data provided, but also determining what additional data might be needed
• Conduct investigations into moderate to complex cyber security incidents using fundamental incident response processes and approach
• Present complex technical incident details to legal, privacy, and senior EHI leadership for evaluation
• Use lessons learned to improve EHI’s security posture in conjunction with the GCS leadership team
• Ensure constant state of incident readiness that adapts to the changing threat landscape by maintaining playbooks and processes used by the team
• Ensure forensic practices are followed in the collection and preservation of data related to security incidents, legal holds, and other investigations

Equal Opportunity Employer/Disability/Veterans