The Expertise You Have Strong working experience as an Incident manager handling incidents and problems in a 24/7 production environment, this includes Major Incident Management. Expertly handle executive "swoop" such as overriding the Incident Manager, anti-motivation, status requests, questioning severity, or handle disruptive or belligerent responders Must have full understanding of the ITIL practices to support the day-to-day operations and Agile Project Management, as well as CI/CD pipelines and the technologies that support them.

Under the leadership of the Manager, Security Operations Center (SOC), the SOC Analyst - Tier 3 (SOC3) will ensure delivery of the highest level of service in the support of conducting security event monitoring and analysis as well as incident response.

The SOC3 will also work other SOC and threat management staff with development and enhancement of existing detection and response capabilities including creation of SIEM content, IDS rules, SOP documentation, and implementation of incident response methodologies.

Perform incident response activities such as host triage and retrieval, malware analysis, remote system analysis, end-user interviews, and remediation efforts. Works with Senior Enterprise Security staff as well as the Computer Security Incident Response Team on a day-to-day basis.

Experience in SIEM event auditing, log review and incident response. Reports to: Manager, Security Operations Center. Responsibilities will include the day-to-day (24x7) operations to include the application of analytic and technical skills to investigate intrusions, identify malicious activity and potential insider threats, and perform incident response.

Tier 3 incident response experience. Must have at least one of the following certifications: CISSP, CCE, PMP, GSEC, CCNA Cyber Ops, CISF-GIAC Information Security Fundamentals, CISM, CRISC, Security+, CEH and GISF.

Working Conditions: Fully-remote position working in a 24x7 response operation center setting with no exposure to adverse environmental conditions. Responsible for responding to security incidents (malware infections, unauthorized access, malicious emails, DDoS attacks) and elevating to Threat Management team as needed.

From 5G and the internet of things to drones, autonomous vehicles and AR/VR, we enable the technologies that help people stay safe, connected, and ready for the future. Perform operational 'eyes on glass' real-time monitoring and analysis of security events from multiple sources including but not limited to events from SIEM monitoring tools, network and host-based intrusion detection systems, firewall logs, system logs (Unix & Windows.

Conduct active and passive analysis of network traffic, operating systems, and host activity across all technologies and platforms, through security tools and sandbox environments. Finds common ground and viable solutions to complex problems in a compelling manner while maintaining a professional composure.

Bachelor's degree in IT or Computer Security or comparable years' experience. Whenever you make a call, track a workout or stream music and videos, we're the ones providing the communications infrastructure that makes it all possible.

Splunk User Certification, Splunk Power User Certification, Splunk Admin Certification, a plus. IT experience in SIEM with a concentration on Linux. High understanding of processes related to threat correlation and mitigation.

Collaborate across organizational lines and develop depth in cyber security discipline and technologies. Process SOC tickets as well as assist in processing IT Security Helpdesk tickets. This is a remote role with the expectation of on-site/in-person collaboration with teammates and stakeholders for moments that matter and may require up to 5% travel.

Maintains detailed record keeping for in-service training, water testing, chemical applications, controller settings, pump, motor and filter pressure levels, third party and employee accident reports, critical incident and incident reports, cash reports, program registration and class lists and swim lesson records.

Significant expertise with EDR, SIEM, Vulnerability management, MITRE attack framework and Incident response. This position will work closely with the Cyber Security, Networks and Infrastructure teams on security risk mitigation activities with strong focus on incident response, vulnerability management and threat intelligence, and support the design and implementation of coherent and robust security solutions.

As necessary, performs fundamental environmental and industrial hygiene monitoring as directed by the EHS Manager or specialists in these fields Develops and implements fundamental team member training and education programs related to environmental, health and safety compliance and incident prevention.