Benefits

15% Night differential
20 Paid Time Off (PTO) per year
Annual Appraisal
Annual Incentive
Hybrid Work Arrangement
HMO with FREE dependents
Group life insurance

OVERVIEW AND REPORTING RELATIONSHIP 

The Incident Response Analyst will report to the Tenet Incident Response Manager. As the Incident Response Analyst, you will respond to cyber security threats while documenting and reporting incidents through the incident response lifecycle. The Analyst will perform endpoint and network forensics, basic malware analysis, threat hunting, managing EDR (Endpoint Detection and Response) solution, etc. You will apply your technical knowledge and investigative skills to perform in depth analysis and report your findings and conclusions to management.

RESPONSIBILITIES

Respond to incident using the incident response cycle: Preparation, Detection/Identification, Containment, Eradication, Recovery, and follow-up.
Manage Endpoint Detection and Response (EDR) solution.
Perform threat hunting using EDR solution and other security tools.
Evaluate threats and threat intelligence sources and determine organization risk and improve threat detection.
Conduct host-based forensics and analysis to identify threat, root cause, impact, etc.
Communicate with various teams across the enterprise to perform initial triage and information gathering of security incident.
Consistently review playbooks and improve as necessary.
Perform basic malware analysis to identify basic IOCs and/or BIOCs.
Build and maintain sandbox environment to be able to safely investigate threats.
Develop and maintain strong working relationships with technical and non-technical teams involved with information security and privacy (Legal, Business Development, Internal Audit, Fraud, Physical Security, Developer Community, Networking, Systems, etc.).
Deliver findings, recommendations and remediation steps for all activities.
Create reports and document incidents and remediation steps for all activities.

QUALIFICATIONS

Bachelor's degree in Business or Technology or equivalent practical experience.
3 years of experience in Digital Forensic and Incident Response
Red Team experience.
One or more professional security certifications such as CISSP, CEH, GIAC, or ECIH
Strong experience with EDR solutions and threat hunting.
Experience with intrusion detection, network security management, endpoint security and architecture.
Splunk experience.

Cybersecurity Incident Response Analyst

About Tenet Healthcare