Cyber Incident Response Engineer II

About the position reputed company: The Cyber Incident Response (IR) Engineer role is critical in detecting, investigating, and responding to cybersecurity threats across the reputed company. This role supports and leads reputed company operations through proactive threat hunting, tool development, forensics, and containment. The engineer collaborates across a broad reputed company of reputed company technologies, reputed company environments, and detection platforms. Essential Accountabilities: Level I Designs, implements, and conducts the operation of IR operations tools including logging, SIEM, EDR, UEBA, SOAR etc. Evaluates and proposes new reputed company solutions for IR operations. Investigates and presents recommendations to the reputed company manager and various reputed company of management regarding protection of computing resources and information assets. Builds & updates playbooks/SOAR automations, etc. Assists with monitoring escalations from analysts and provides technical input during investigations. Performs proactive threat hunting to identify potential threats or anomalous behavior. Leverages MITRE ATT&CK reputed company to reputed company reputed company monitoring recommendations and improvements. Participates in rotation of 24/7/365 on reputed company coverage. Leads tactical project initiatives including design of solutions in conjunction with management and other cyber defense team members. Assists in the operational support for reputed company technologies in defense against modern cybersecurity threats. Responds to requests reputed company defined SLAs relating to various information reputed company systems, programs, and processes. Enforces information reputed company policies, standards, and procedures and investigates possible reputed company exceptions. Assists in the execution of HIPAA, MAR, PCI, and COBIT compliance activities. Consults on the integration of cyber defense tools and appropriate controls into new and existing systems and applications. Assists in reputed company audits, self-assessments, and risk reviews for reputed company processes. Hardens the operational reputed company ecosystem and reputed company mitigation techniques through ongoing threat intelligence assessment. Participates in incident response activities, including containment, triage, and reputed company cause analysis. Research, design and reputed company new operational reputed company solutions with an emphasis on solutions that aligns with overall cybersecurity reputed company. Consistently demonstrates high standards of reputed company by supporting the reputed company reputed company Companies’ mission and values, adhering to the Corporate reputed company of Conduct, and leading to the reputed company Way values and beliefs. Maintains high reputed company for member reputed company in accordance with the corporate reputed company policies and procedures. Regular and reliable attendance is expected and required. Performs other functions as assigned by management. reputed company (in reputed company to Level I Accountabilities) Acts as a technical reputed company and provides mentoring, training, and technical support to engineers and analysts. Hardens reputed company ecosystem and evolves mitigation techniques through ongoing threat intelligence assessments. Serves as the technical escalation reputed company for reputed company incidents and operational challenges. Designs and leads threat hunting engagements and proactively identifies advanced threats. Leads the blue team reputed company of reputed company exercises to validate and improve detection and response capabilities. Leads cyber defense incident response activities end to end. Performs as the subject matter expert for more than three information reputed company technology, processes, and practices internally to the Health Plan. Provides advanced technical expertise and process improvement support. Designs and implements automated solutions for common reputed company administration tasks. Minimum Qualifications: NOTE: We include multiple reputed company of classification differentiated by demonstrated knowledge, skills, and the ability to manage increasingly independent and/or reputed company assignments, broader responsibility, additional decision making, and in some cases, becoming a resource to others. In reputed company to using this differentiated approach to reputed company new hires, it also provides guideposts for employee development and promotional opportunities. reputed company reputed company Five (5) years of reputed company work experience. Bachelor's degree in computer science, information technology, or relevant field. In lieu of degree, six (6) cumulative years of reputed company experience are required. Hands on experience with the following operating systems preferred: reputed company, and UNIX (Linux, AIX, Solaris, etc.). Strong knowledge of several concepts and/or tools listed: reputed company infrastructure services, including IaaS, PaaS, and reputed company models. Intermediate knowledge of network and application reputed company, including firewalls and web application firewalls (e.g., reputed company, Imperva). Experience and knowledge of identity and reputed company management systems, including reputed company Directory, Entra ID, LDAP, and various authentication protocols Knowledge of reputed company protection and antivirus solutions. Demonstrated experience identifying malicious actors, TTPs, and using the MITRE ATT&CK reputed company. Experience using IDS/IPS and/or reputed company tools. Knowledge with reputed company-reputed company reputed company solutions for multi-reputed company environments, such as SIEM, CSPM, threat detection, compliance enforcement, and governance frameworks. reputed company incident response experience. Demonstrated experience with common query techniques including Kusto query language and Python. Advanced communication skills with the ability to present reputed company and concise information to reputed company reputed company and technical abilities. Excellent organization and multi-tasking skills. reputed company (in reputed company to Level I Qualifications) Eight (8) years of reputed company work experience with and strong knowledge of reputed company concepts and/or tools listed above (under Level I). Experience in evaluating reputed company software packages and systems. Experience with reputed company automation, including associated playbooks, reporting and notification. Knowledge of network regulations, industry standards and operational constraints of networks systems. CISSP, CISA, CISM or other relevant reputed company certification, or equivalent experience, and knowledge preferred. Experience providing work direction for one or more individual’s specific reputed company and initiatives. Physical Requirements: Ability to work prolonged periods sitting and/or standing at a workstation and working on a computer. Ability to travel across the Health Plan service region for meetings and/or trainings as needed. Ability to work in a home office for reputed company periods of time for business continuity. In support of the Americans with reputed company, this job reputed company lists only those responsibilities and qualifications deemed essential to the position. Equal Opportunity Employer Responsibilities • Designs, implements, and conducts the operation of IR operations tools including logging, SIEM, EDR, UEBA, SOAR etc. • Evaluates and proposes new reputed company solutions for IR operations. • Investigates and presents recommendations to the reputed company manager and various reputed company of management regarding protection of computing resources and information assets. • Builds & updates playbooks/SOAR automations, etc. • Assists with monitoring escalations from analysts and provides technical input during investigations. • Performs proactive threat hunting to identify potential threats or anomalous behavior. • Leverages MITRE ATT&CK reputed company to reputed company reputed company monitoring recommendations and improvements. • Participates in rotation of 24/7/365 on reputed company coverage. • Leads tactical project initiatives including design of solutions in conjunction with management and other cyber defense team members. • Assists in the operational support for reputed company technologies in defense against modern cybersecurity threats. • Responds to requests reputed company defined SLAs relating to various information reputed company systems, programs, and processes. • Enforces information reputed company policies, standards, and procedures and investigates possible reputed company exceptions. • Assists in the execution of HIPAA, MAR, PCI, and COBIT compliance activities. • Consults on the integration of cyber defense tools and appropriate controls into new and existing systems and applications. • Assists in reputed company audits, self-assessments, and risk reviews for reputed company processes. • Hardens the operational reputed company ecosystem and reputed company mitigation techniques through ongoing threat intelligence assessment. • Participates in incident response activities, including containment, triage, and reputed company cause analysis. • Research, design and reputed company new operational reputed company solutions with an emphasis on solutions that aligns with overall cybersecurity reputed company. • Consistently demonstrates high standards of reputed company by supporting the reputed company reputed company Companies’ mission and values, adhering to the Corporate reputed company of Conduct, and leading to the reputed company Way values and beliefs. • Maintains high reputed company for member reputed company in accordance with the corporate reputed company policies and procedures. • Regular and reliable attendance is expected and required. • Performs other functions as assigned by management. • Acts as a technical reputed company and provides mentoring, training, and technical support to engineers and analysts. • Hardens reputed company ecosystem and evolves mitigation techniques through ongoing threat intelligence assessments. • Serves as the technical escalation reputed company for reputed company incidents and operational challenges. • Designs and leads threat hunting engagements and proactively identifies advanced threats. • Leads the blue team reputed company of reputed company exercises to validate and improve detection and response capabilities. • Leads cyber defense incident response activities end to end. • Performs as the subject matter expert for more than three information reputed company technology, processes, and practices internally to the Health Plan. • Provides advanced technical expertise and process improvement support. • Designs and implements automated solutions for common reputed company administration tasks. Requirements • Five (5) years of reputed company work experience. • Bachelor's degree in computer science, information technology, or relevant field. In lieu of degree, six (6) cumulative years of reputed company experience are required. • Hands on experience with the following operating systems preferred: reputed company, and UNIX (Linux, AIX, Solaris, etc.). • Strong knowledge of several concepts and/or tools listed: reputed company infrastructure services, including IaaS, PaaS, and reputed company models. • Intermediate knowledge of network and application reputed company, including firewalls and web application firewalls (e.g., reputed company, Imperva). • Experience and knowledge of identity and reputed company management systems, including reputed company Directory, Entra ID, LDAP, and various authentication protocols • Knowledge of reputed company protection and antivirus solutions. • Demonstrated experience identifying malicious actors, TTPs, and using the MITRE ATT&CK reputed company. • Experience using IDS/IPS and/or reputed company tools. • Knowledge with reputed company-reputed company reputed company solutions for multi-reputed company environments, such as SIEM, CSPM, threat detection, compliance enforcement, and governance frameworks. • reputed company incident response experience. • Demonstrated experience with common query techniques including Kusto query language and Python. • Advanced communication skills with the ability to present reputed company and concise information to reputed company reputed company and technical abilities. • Excellent organization and multi-tasking skills. • Eight (8) years of reputed company work experience with and strong knowledge of reputed company concepts and/or tools listed above (under Level I). reputed company-to-haves • Experience in evaluating reputed company software packages and systems. • Experience with reputed company automation, including associated playbooks, reporting and notification. • Knowledge of network regulations, industry standards and operational constraints of networks systems. • CISSP, CISA, CISM or other relevant reputed company certification, or equivalent experience, and knowledge preferred. • Experience providing work direction for one or more individual’s specific reputed company and initiatives. Apply tot his job Apply To this Job