Analyst, Cybersecurity DFIR

Job Description

Job Purpose

The ICE Cybersecurity DFIR team is responsible for defending critical financial infrastructure from Global Cyber threats. We leverage an evolving arsenal of controls that require technical proficiency as well as tenacity, professionalism, and strong communication skills.

Responsibilities

• Email Triage - Evaluating staff reported emails for malicious intent
• Data Loss Prevention - Reviewing Daily DLP events for evidence of internal information leaving the network
• Operations - Handling end user support requests. Some examples of end-user requests : unblocking websites, permitting file uploads, modifying anti-virus policies, and testing email attachments.
• Incident Management - Detect, document, investigate, and resolve security incidents in an efficient manner
• Intrusion Detection - Develop and tune anomaly detection capability to produce reliable actionable data
• Behavioral Analysis - Develop and implement criteria to identify anomalous user behavior leading indicating insider threat activity

Desirable Knowledge And Experience

Core Competencies

Advancement Opportunity

Seniority is determined by experience and demonstration of exceptional competencies including :

Skills Required

intrusion detection, Networking, Data Loss Prevention, Incident Management, Automation, Systems Administration