Full-Time Lead Cyber Defense Analyst

As a Cyber Defense Lead, you will join Experian's Cyber Fusion Center, performing in-depth analysis, evaluation and response to security threats. You will report into the Sr. Manager of SecOps and Threat Detection.

• Monitor the daily operations of the team, being the primary liaison between analysts and leadership
• Provide advanced support and act as a designated contact for the Cyber Defense Analysts
• Oversee response activities for security events and alerts associated with cyber threats
• Use investigative experience and technical skills to analyze events using security tooling and logging
• Monitor for anomalous changes in metrics, notable open incidents, quality concerns, or observed risks
• Complete assigned caseload throughout the incident response lifecycle
• Be a mentor to Cyber Defense Analysts, providing feedback on the quality of work to analyst(s) and management
• Lead the development of relevant Standard Operating Procedures (SOPs), and training materials
• Collaborate with the Cyber Threat Intelligence (CTI) and content development teams

• 5+ years of information security experience working within a Security Operations Center or Cyber Security Incident Response Teams; at least 1 of which ideally includes experience as a team lead
• Bachelor's Degree in Computer Science, Computer Engineering, Information Systems, Information Security, or a related field.
• History of interpreting device and application logs from a variety of sources
• 1+ professional certifications related to Digital Forensics, Incident Response, or Ethical Hacking
• Information security management certifications (CISSP, CISM)
• Knowledge of the Incident Response Life Cycle, MITRE ATT&CK Framework, and Cyber Kill Chain
• Understanding of common Operating Systems, Networking, Cloud Infrastructure, and Security Technologies
• Experience with Security Monitoring applications such as SIEM, EDR
• Experience with SOAR technologies
• Security analysis and architecture knowledge using tools including Defender for Cloud, Wiz.io, GuardDuty, CloudTrail, or CloudWatch.
• Record of improving the way work is performed, originating action and ideas to lead enhancements to existing processes.
• Abvailable to work outside of normal work hours to respond to cybersecurity incidents

What is the last date for applying to the job?

Which countries are accepted for this remote job?