Analyst, Cybersecurity DFIR

Intercontinental Exchange Holdings, Inc.; Provo (UT); On-site; USD 90,000 - 130,000; Full time

Job summary

Intercontinental Exchange, Inc. is seeking a cybersecurity professional to join the DFIR team. You will analyze security data, detect and investigate incidents, and build timelines from forensic artifacts to drive remediation and lessons learned.

The role emphasizes designing preventative controls, proactive threat hunting, and identifying insider threats through behavioral analysis and network anomaly tuning. Collaboration with teammates across offices is expected.

Qualifications

• Bachelor’s degree in a related field or minimum one year in an information security role.
• Hands-on experience with Windows and Linux.
• Understanding of networking and its applications.

Responsibilities

• Distill actionable information from large data sets for reporting, hunting, and anomaly detection.
• Detect, document, investigate, and resolve security incidents efficiently.
• Construct timelines from forensic artifact analysis to support incident conclusions.
• Design and implement preventative and corrective controls against emerging threats.
• Develop and execute focused plans to discover advanced threats that evade traditional controls.
• Identify anomalous user behavior to address insider threat activity.
• Tune network anomaly controls to produce reliable, actionable data.

Skills

Networking knowledge

Windows

Linux

Incident response

Education

Information Security degree or equivalent experience

Job description

Job Description

The ICE Cybersecurity Digital Forensics and Incident Response (DFIR) team is responsible for defending critical financial infrastructure from Global Cyber threats. We leverage an evolving arsenal of controls that require technical proficiency as well as tenacity, professionalism, and strong communication skills.

Responsibilities

• Security Analytics - Efficiently distill actionable information from large data sets for reporting, hunting, and anomaly detection
• Incident Management – Detect, document, investigate, and resolve security incidents in an efficient manner
• Endpoint Forensics - Construct meaningful incident timelines from forensic artifact analysis
• Counter Measures - Ability to design and implement preventative and corrective controls to counteract emerging threats
• Proactive Threat Hunting - Develop and execute focused plans to discover advanced threats that evade traditional security controls
• Behavioral Analysis - Develop and implement criteria to identify anomalous user behavior leading indicating insider threat activity
• Intrusion Detection - Develop and tune network anomaly control capability to produce reliable actionable data

Preferred Knowledge and Experience

• Understanding of networking and its application
• University degree in related discipline or minimum one year in an Information Security Role
• Hands on experience with Windows and Linux

Core Competencies

• Teamwork: works well with teammates locally and at remote offices; shares knowledge and is seen as someone to go to for help; contributes in weekly peer meetings
• Problem solving and decision making: demonstrates a sense of urgency; takes ownership of problems and follows temporary fixes with permanent solution; finds creative solutions
• Communication: is clear and accurate in verbal and written communication; listens to peers and supported employees; follows directions and provides useful feedback
• Professionalism: makes a positive impression in person, via phone, and electronically; models a ‘can-do’ attitude; embraces additional responsibility; refrains from office gossip or conflict; works extra hours as needed to ensure work is complete; adheres to corporate policy and encourages others to do the same

Intercontinental Exchange, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to legally protected characteristics.