Senior Information Security Analyst - Cyber Incident Response Team at Marriott in Boise, Idaho, United States Job Description Job Number 24121499 Job Category Information Technology Location Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States Schedule Full-Time Located Remotely? Y Relocation? N Position Type Management JOB SUMMARY The Cyber Incident Response Analyst is responsible for responding to both existing and emerging threats, as well as identifying attacker tools, tactics, and procedures by analyzing data from a variety of sources and tools. Through a strong understanding of attacker behavior, participates in and manages security events and incidents, and helps train and mentor other analysts. The successful candidate will possess current technical skills and strong communication skills to manage multiple investigations with often tight deadlines. Required Experience and Education + 5+ years of experience in Information Technology/Security + 3+ years of experience in Cyber Incident Response that must include experience in: + Identification and response to existing and emerging threats + Identification of attacker tools, tactics, and procedures (TTPs) + Security data analysis from a variety of sources and tools + TCP/IP, DNS, SIEM, and EDR technologies (Splunk, CrowdStrike, Carbon Black, etc.) + Windows environments and related security controls (IDS/IPS, AV, Proxies, Firewalls, etc.) + 1+ years of experience with + Windows log analysis and memory forensics + Network traffic analysis + Undergraduate degree in computer science or related field, or equivalent work experience + Ability to work flexible schedule that may include shift work Attributes and Preferred Experience: + Development of incident response reports and documents or other similar reporting (demonstrated writing & comms skills) + Experience in a similarly sized organization with significant complexity + Strong time management skills to balance multiple activities and lead junior analysts as needed + Security Certification (i.e. GCIH, GCFA, CCSP, OSCP, etc.) + Experience writing scripts, tools, or methodologies to enhance the investigative process + Experience responding to cyber events in public cloud environments such as AWS, Azure, Google Cloud, etc. CORE WORK ACTIVITIES + Conduct host forensics, network forensics, and log analysis in support of incident response investigations + Handle escalations from internal and external sources to quickly triage and respond to threats as needed + Utilize o To view full details and how to apply, please login or create a Job Seeker account Idaho State Job Bank
...seeking to add highly motivated individuals to our dynamic and growing company and will be filling the position of Class 1 Pressure Truck Operators. This position will report to Fluid Field Supervisor and work will take place in a camp setting near Bonnyville / Cold Lake...
...Licensed Psychiatric Nurse Practitioner working remotely, offering the flexibility to manage... ...'s resources for patient management and insurance processing. Clinicians can set their own... ...remotely via telehealth while working from home. We accept the following licenses on a...
...require strength and flexibility of whole body for handling, positioning, moving and manipulating equipment and materials and vacuum truck operations. Responsibilities: Drive and operate efficiently and safely all power equipment, and vehicles in accordance with...
...Posting Details Posting Details Posting Number S13348P Working Title Farm Manager - UGA Grand Farm, Perry, GA Department CAES-Assoc Dean for Research About the University of Georgia Since our founding in 1785, the University of Georgia has operated as Georgia...
Overview: Social Services Assistant JOIN AN OUTSTANDING TEAM! Whats your wish list for the perfect job? Maybe its to make a positive impact in the world , or to grow your career . Maybe working with a great team is top priority, or to feel respected and valued...