Cyber Security Senior Analyst - HIH - Evernorth

Cyber Security Senior Analyst, Incident Response

Position Summary

Cigna Information Protection is looking for a Senior Analyst, Incident Response (IR). The Incident Response Senior Analyst is responsible for handling and coordinating lower severity cybersecurity incidents as part of a 24x7 operation. The IR Senior Analyst acts as a supporting role to the major incident management process in the event of High or Critical Severity cybersecurity incidents. The IR Senior Analyst also acts as a point of escalation to lower tier analysts and provides mentorship.

Job Description & Responsibilities

• Monitor and respond to security alerts generated by the Managed Security Service Provider (MSSP), Cigna's SIEM and / or SOAR platforms.
• Analyze, document, and communicate security events based on priority given by MSSP or SOC Team Lead and according to SOC protocol.
• Provide escalation support for security events from SOC Analysts.
• Participate in CSIRT functions supporting investigative requests and / or to assist with the development of containment / mitigation strategies.
• Perform host and network-based log analysis to identify potentially infected hosts and escalate to appropriate team according to SOC protocol.
• Correlate IOCs with data from information security systems / tooling to identify attacks and / or potentially compromised systems and escalate to appropriate team according to SOC protocol.
• Collaborate with Cigna's Threat Intelligence, Threat Hunt, and Adversary Simulation teams to refine and / or improve threat detections and / or security controls and configurations for security monitoring systems.
• Contribute to the evaluation, testing, and implementation of new detections, security tools and processes.
• Develop and maintain documentation for all assigned responsibilities. Develop and report on trends and provide focus and situational awareness on all issues to SOC leadership.
• Required to perform duties outside of normal work hours based on business needs.
• Working in a shift is required for this role and you will be allocated to one of the following :

Morning Shifts (06 : 00am-03 : 30pm)

Saturday

Thursday

General Shifts (11 : 30am-8 : 30pm) :

Saturday

Thursday

Experience Required

Experience Desired

Education And Training Required

Primary Skills

Additional Skills

About Evernorth Health Services

Evernorth Health Services, a division of The Cigna Group, creates pharmacy, care and benefit solutions to improve health and increase vitality. We relentlessly innovate to make the prediction, prevention and treatment of illness and disease more accessible to millions of people. Join us in driving growth and improving lives.

Skills Required

Encase, Powershell, volatility, Bash, Incident Response, Perl, Splunk, Python, ftk