Information Security Analyst Incident Response Lead {remote}

The Information Security Analyst Lead for Incident Response will be part of the Security Operations and Engineering team within Patterson’s Information Security department. This pivotal role leads, develops and executes the cyber security incident response program and helps support the installation, operation and maintenance of network security hardware and software.  The role will take ownership and drive all aspects of security support, ensuring security and project goals are being met.

Essential Functions

To perform this job successfully, an employee must be able to perform each essential function satisfactorily, with or without reasonable accommodation. To request a reasonable accommodation, notify Human Resources or the manager who oversees the position.

• Lead and take ownership of incident resolution and technical disaster recovery, acting as a first point of escalation for security related events and incidents

• Produce detailed incident and after-action reports and coordinate post incident review with involved stakeholders

• Integrate and collaborate with outside service providers and other functional teams to identify deficiencies in processes and tools, recommend improvements and corrective actions

• Coordinate and facilitate response and recovery efforts including IR table talk and disaster recovery exercises

• Provide input and support to adjacent security programs and efforts to include but not limited to Vulnerability Management, Penetration Testing, IT Compliance, and Identity Management

• Oversee the maintenance, support, and delivery of associated security platforms

• Drive continuous improvements in acting on alerts, service requests, and incidents

• Integrate best practices to proactively monitors systems and applications for system and security related issues

• Considered subject matter expert in assigned platforms and keeps up-to-date knowledge to drive improvements

• Strong mentor with the ability to work with junior team members to provide leadership and training on new tools or projects

Job Qualifications

• Bachelor’s Degree with an emphasis in security, technology, or engineering or equivalent work experience

• At least 4 years work experience in information technology, cyber security, or information security

• Direct experience working in security incident response, mitigation, and planning including expertise in analyzing attack vectors, current threats, and security remediation strategies

• Hands-on knowledge with security network monitoring tools and detection solutions such as SIEM, SOAR, EDR/XDR solutions and technologies

• Knowledge with common security frameworks such as NIST CSF, MITRE ATT&CK and Cyber Kill Chain

• Experience setting up disaster recovery plans

• Ability to work on-call and after hours as needed

• Security industry certification desired such as CISSP, GCIH, CEH, or CHFI