The IT Security Operations Center's mission is to preserve our assets' confidentiality, integrity, and availability by identifying operational and security risks and collaborating with business, functional, and customer stakeholders to develop plans that manage risk to acceptable levels. We are currently seeking a Sr. Cyber Incident Response Analyst to join our team.

About the Role

• Monitor for and investigate suspicious or malicious activity and alerts
• Review Change Management requests for security relevance and impact
• Daily review of system, application logs, and custom monitoring tools
• Malware and Advanced Persistent Threat (APT) analysis and remediation
• Incident Response and Investigations
• Availability for rotating on-call shifts (up to 2 - 3 times per year)

• You're a fit for the role if your background includes:
• Have obtained a bachelor's degree or equivalent experience - a degree in an Information Technology or Systems related subject area is preferred but not required.
• Have 3+ years of experience supporting and leading processes or programs in Information Technology or Security.
• Experience with tools like Kape, Encase, Axiom, FTK, XWays, or disk/memory forensics.
• Have solid organizational and critical-thinking skills and demonstrate close attention to detail and care in your work.
• Are effective written and oral communicators.
• Have the ability to learn and operate in a dynamic environment, comfortable with ambiguity and fast turn-around times.
• Exhibit sound interpersonal skills and can influence/execute across multiple stakeholder groups.
• Are a quick learner and have a demonstrated ability to distill complex information into quickly digestible reports & presentations for executives.
• Are comfortable with a flexible schedule, including working off-hours and weekends if necessary.
• Ability to learn and operate in a dynamic environment
• Ability to demonstrate analytical expertise, close attention to detail, excellent critical thinking, logic, and solution orientation, and to learn and adapt quickly
• Strong oral and written communication skills
• A Strong desire to develop into a Cybersecurity subject matter expert with an initial focus on the incident response domain
• Desired knowledge or experience:
• SANS GIAC, CompTIA Security+ CE, or similar professional security certifications
• Experience with ServiceNow or similar service management/ticketing systems
• Experienced with processes, tools, and techniques in incident response and forensic investigations
• Experience using event escalation and reporting procedures
• Experience supporting Network Investigations
• Understanding TCP/IP communications & knowledge of how standard protocols and applications work at the network level, including DNS, HTTP, and SMB
• Understanding of standard security controls for Windows, Linux, and network equipment
• Strong knowledge of cyber investigations, containment, gathering of artifacts, and case management

• Hybrid Work Model: We've adopted a flexible hybrid working environment (2-3 days a week in the office depending on the role) for our office-based roles while delivering a seamless experience that is digitally and physically connected
• Wellbeing: Comprehensive benefit plans; flexible and supportive benefits for work-life balance: flexible vacation, two company-wide Mental Health Days Off; work from another location for up to a total of 8 weeks in a year, 4 of those weeks can be out of the country and the remaining in the country, Headspace app subscription; retirement, savings, tuition reimbursement, and employee incentive programs; resources for mental, physical, and financial wellbeing.
• Culture: Globally recognized and award-winning reputation for equality, diversity and inclusion, flexibility, work-life balance, and more.
• Learning & Development: LinkedIn Learning access; internal Talent Marketplace with opportunities to work on projects cross-company; Ten Thousand Coffees Thomson Reuters café networking.
• Social Impact: Ten employee-driven Business Resource Groups; two paid volunteer days annually; Environmental, Social and Governance (ESG) initiatives for local and global impact.
• Purpose Driven Work: We have a superpower that we've never talked about with as much pride as we should - we are one of the only companies on the planet that helps its customers pursue justice, truth and transparency. Together, with the professionals and institutions we serve, we help uphold the rule of law, turn the wheels of commerce, catch bad actors, report the facts, and provide trusted, unbiased information to people all over the world.