Apply on Employer Site

Taxwell · 3 months ago

Sr. Security Ops Analyst- Incident Response

United States

Full-time

Remote

Senior Level

5+ years exp

Taxwell helps everyday Americans get every tax advantage they deserve by finding credits and deductions they never even knew existed. The Sr. Security Ops Analyst/Incident Response role is a part of the Taxwell IRM team, focusing on cyber security monitoring, reporting, and response as well as threat hunting.

Enterprise SoftwareSoftwareTax Preparation

Responsibilities

Receive incident escalations from monitoring team and assist with real-time advanced analysis, response, and reporting

Mentor and assist in training analysts to aid in their skills development and analytical capabilities

Proactively hunt for threats and enacting identification, containment, and eradication measures while supporting recovery efforts

Point person for coordination with appropriate parties during a security incident – client, management, legal, security, operations, etc

Create thorough reports and documentation of all incidents and procedures, presenting findings to team and leadership on a routine basis

Supports detection capabilities and refines process through alert validation

Performs threat hunting and proactive incident response

Completes follow-through to ensure quality forensic materials are captured, preserved and documented along with details and timelines of events and recommendations to avoid future occurrences

Assist in the general maintenance and improvement of processes and/or playbooks

Conduct research regarding the latest methods, tools, and trends in digital forensics analysis

Conduct analysis using logs, previous alerts, etc. to identify trends to identify and prevent potential incidents

Ingest data from multiple sources and aggregate client metrics

Qualification

CISSP certificationInformation systems securityCloud environmentsThreat huntingPowerShellPythonEDR solutionsData VisualizationAnalytical skillsCommunication skillsProblem-solving skillsTeamworkSelf-motivated

Required

Bachelor's degree or equivalent combination of CISSP certification and prior experience

Five or more years of experience in information systems security

Good communication skills to interact with clients, team members, management, and support personnel

Good analytical and problem-solving skills

Ability to work independently and as part of a team, be highly self-motivated

Experience with cloud environments, such as Microsoft Azure and Amazon Web Services; Container services and Kubernetes; Azure Monitor and/or Sentinel; Experience with AD and Entra ID; Mimecast and Microsoft Purview; Microsoft OpenAI Services; AWS technologies such as EC2, ECS, Lambdas, LightSail, and VMware Cloud

Ability to script in PowerShell, Python