Incident Response PositionThis position may be offered to a candidate authorized to work in the US for his/her/their stated employer, without any restrictions which would prevent the candidate from working on the proposed assignment for the duration of the assignment period.Must Haves: This is an incident response position. Cyber Sec Certification (CompTIA, or InfoSec related). Ability to contribute to the on-call rotation. Some prior experience in an incident response or customer facing role.• Develop and administer data security policies• Safeguard information• Evaluate existing data security procedures• Identify new areas of risk• Perform forensic analysis on workstations, servers, mobile devices, and other technology as needed• Knowledge of:• UDB• Sybase• Oracle• Mainframe• TAM• Etrust• SQL• Experienced in Excel• Excellent written and oral communication• 2+ years of hands-on experience in at least two of the following areas: security operations, incident response, network/host intrusion detection, threat response.• Demonstrated experience in handling security events in mission critical environments; hands-on troubleshooting, analysis, and technical expertise to resolve incidents and service requests.• Proven experience in day-to-day operational processes such as security monitoring, data correlation, troubleshooting, security operations etc.• Good grasp of security incident response, such as different phases of response life cycle, Indicators of Compromise (IoCs), etc.
Experience analyzing system and application logs to investigate security issues.• Strong knowledge of enterprise detection technologies and processes (Detection Tools, IDS/IPS, EDR, NDR, Network Packet Analysis, Endpoint Protection).