Cyber Incident Response Lead & Threat Analysis Expert

Highmark Health; Nashville (TN); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Highmark Health in Nashville is seeking a Senior Cyber Incident Responder to lead investigations within the Cyber Fusion Center, ensuring CIRP adherence and thorough documentation. You will coordinate expert support, analyze logs, and drive remediation across enterprise systems.

The role requires 5 years in malware analysis, forensics, and cyber incident handling, with preferred ITIL/ CISSP/GCFAs certifications. This position offers office- or remote-based work and up to 25% travel.

Qualifications

• 5 years of Malware Analysis, Digital Forensics, Data/Network Analysis, Penetration testing, Trends Analysis, or Information Assurance.
• 5 years of Cyber Incident Handling.

Responsibilities

• Coordinate and provide expert technical support to enterprise-wide cyber defense technicians to resolve cyber defense incidents.
• Correlate incident data to identify vulnerabilities and enable expeditious remediation.
• Analyze logs from host, network, firewall, and IDS to identify threats.
• Triage incidents: scope, urgency, impact, vulnerabilities, and remediation.
• Perform cyber defense trend analysis and reporting to leadership.
• Collect forensic images and inspect for mitigation on enterprise systems.
• Handle real-time cyber defense incidents to support deployable IRTs.
• Receive and analyze network alerts and determine possible causes.
• Track and document incidents from detection to resolution.
• Other duties as assigned.

Skills

Malware handling

Evidence integrity

Network security

Vulnerability recognition

Network protection

Damage assessment

Event correlation

Cloud IR design

Education

Bachelor's in CS/Cybersecurity/IT

6 years information security experience

Masters in CS/IT

Tools

HITRUST CSF

NIST 800-83

Security investigation tools

Job description

Highmark Health in Nashville is seeking a Senior Cyber Incident Responder to lead investigations within the Cyber Fusion Center, ensuring CIRP adherence and thorough documentation. You will coordinate expert support, analyze logs, and drive remediation across enterprise systems.

The role requires 5 years in malware analysis, forensics, and cyber incident handling, with preferred ITIL/ CISSP/GCFAs certifications. This position offers office- or remote-based work and up to 25% travel.