Incident Response Analyst

Lead Stack Inc. is an award-winning, one of the nation's fastest-growing, certified minority-owned (MBE) staffing services provider of contingent workforce. As a recognized industry leader in contingent workforce solutions and Certified as a Great Place to Work, we're proud to partner with some of the most admired Fortune 500 brands in the world.
 
TITLE: Incident Response analyst
LOCATION:  California - Remote
DURATION: 12 months with possible extension
Pay Rate: $55 - $58/hr on W2
 
Job Description:
The Client IT Security organization is looking to add an Incident Response analyst to the IT Security Incident Response team (SIRT) to support Client's IT security initiatives. The Incident Response analyst will apply knowledge to protect the confidentiality, integrity, and availability of Client data by monitoring, declaring, responding, and escalating IT security incidents. Must have an open availability to 24x7x365 schedule changes.
 
Responsibilities

• Alert monitoring and analysis
• Responding and escalating IT security alerts, threats, and vulnerabilities
• Case management of low to high-risk incidents
• Participates in process improvement and documentation review

• Communication skills: This is one of the main personal skills needed by all members of the team. Whether it is to communicate with other team members while in emergency mode, or to communicate calmly and effectively with clients, the public and executives, the ability to convey information clearly and at the appropriate level are essential in a Security professional. Written communication is also important, as members need to be able to write effective policies, communicate clearly with stakeholders via emails, instant message, and/or video calls, as well as document incidents thoroughly.
• Listening skills: The ability to pause and listen to the concerns and requests of clients as well as management is paramount when working during the resolution of an emergency. A Security member who doesn't take the time to listen to fellow team members or customers diminishes his or her ability to resolve the incident in a more effective way.
• Tact and diplomacy: Any time professionals are asked to deal with an emergency, they might find themselves in a situation where they are hard pressed for information or deal with anxious, angry customers and/or managers. The ability to calmly handle all situations with tact and diplomacy can go a long way in keeping the organization focused on what needs to be done to minimize the impact of an incident, as well as to prevent the release of information that shouldn't be public domain.
• Teamwork: In an intricate group of professionals with different technical skills, experience, and roles, it is important that all members can work well in a group, accept differences of approach, understand each other's roles and be able to support each other's functions without reserve. They also need to be able to interact with other sections of the organizations and non-technical staff, as well as recognize and accept leaders in their work group.
• Trustworthiness and discretion: Members of a Security are often privy to highly sensitive information and need to preserve the information they are given. Members need to be able to strike the right balance between what is legitimate to divulge to stakeholders and what information should be well guarded from unnecessary disclosure.
• Problem solving: This is one of the most important skills. Not all incidents are created equally, and professionals need to be able to adapt to changing situations, new scenarios, and a variety of attacks in order to respond as quickly as possible. Strong problem-solving skills and creativity support the technical abilities of team members and allow them to face and resolve even the most unexpected situations.
• Organizational skills: In an emergency, the ability to organize the work, prioritize it and apply time management skills is one of the most important traits. Juggling between the actual technical response to the attack or vulnerability while informing stakeholders, documenting findings and actions, and keeping the rest of the organization's systems running, if possible, requires both types of skills to perform a certain job or task.

• Security Incident Handling & Response: Handle any imminent threat of current violation of an organization's security policies or standard security practices. These security incidents could include malware, ransomware, phishing, Advanced Persistent Threats, Distributed Denial of Service (DDoS) attacks, and more.
• Basic knowledge or IT Networking and IT Computer concepts
• Working knowledge of the NIST / SANS framework for Incident Response

• Analytics & Intelligence: Leverage analytics and intelligence gathering to identify and detect attacks as quickly as possible. Using analytics and intelligence allows the security practitioner to aggregate network and application data to prevent attacks from occurring in the future.

• SIEM: Analyze the data from Security Information and Event Management (SIEM) tools and services.
• SOAR: Utilize A Security Orchestration and Automated Response platform to swiftly respond to security alerts.
• Malware detection: Leverage Endpoint Detection and Response (EDR) to detect and identify Advanced Persistent Threats (APTs) that might circumvent traditional security solutions like anti-virus, firewalls, and IPS/IDS.

• To know more about current opportunities at Lead Stack, please visit us at https://leadstackinc.com/careers/

• Should you have any questions, feel free to call me on 415 985-0816 or send an email on Nishanth.allam@leadstackinc.com