Cybersecurity Analyst - CSIRT

Target; Brooklyn Park (MN); Hybrid; USD 69,800 - 125,700; Full time

Benefits offered by this job

Medical

Vision

Dental

Life insurance

401(k)

Employee discount

Short term disability

Long term disability

Paid sick leave

Paid national holidays

Paid vacation

Job summary

Target is seeking a Cybersecurity Analyst - CSIRT in Minnesota to lead detection and assessment of security incidents across the Target environment. You will collaborate with a team to monitor SIEM/logging, triage requests, and escalate as needed under the Cyber Security Incident Response Plan.

You will help contain threats, assist with remediation, document analyses, and participate in Cyber Hunt activities, contributing to continuous improvements within a 24x7 Cyber Fusion Center.

Qualifications

• Four-year degree or equivalent experience.
• 2+ years in a Security Operations Center or Cyber Security Incident Response Team.
• Security certifications such as Security+, GCIA, GCIH, or CISSP.
• Experience with enterprise SOAR, SIEM and incident management systems.
• Experience supporting network and host investigations.
• Strong analytical, written and oral communication, and teamwork.

Responsibilities

• Detect and assess cyber security events and incidents across Target environments.
• Monitor SIEM/logging to identify threats, intrusions, or compromises.
• Triage service requests and escalate according to incident response plans.
• Contain threats and assist with remediation during or after incidents.
• Document event analysis and write comprehensive incident reports.
• Participate in Cyber Hunt activities under guidance of Incident Commanders.

Skills

SOC experience

Cybersecurity incident response

Analytical thinking

Communication skills

Teamwork

Education

Bachelor's degree or equivalent

Security certification (e.g. Security+, GCIA, GCIH, CISSP)

Tools

SOAR

SIEM

Incident Management systems

Job description

Pay range: $69,800.00 - $125,700.00

Benefits

• Medical
• Vision
• Dental
• Life insurance
• 401(k)
• Employee discount
• Short term disability
• Long term disability
• Paid sick leave
• Paid national holidays
• Paid vacation

Target offers eligible team members and their dependents comprehensive health benefits and programs to help you and your family take care of your whole selves. Other benefits for eligible team members include 401(k), employee discount, short term disability, long term disability, paid sick leave, paid national holidays, and paid vacation. Find competitive benefits from financial and education to well-being and beyond at https://corporate.target.com/careers/benefits.

As a Cybersecurity Analyst - CSIRT, you’ll take the lead as you detect and assess cyber security events and incidents across the Target environment. In this role, you will collaborate and utilize problem solving skills as you work among a team of skilled analysts to address complex or difficult problems within a 24x7 Cyber Fusion Center (CFC) environment. You will implement new processes and procedures as identified by the CSIRT and the CFC Leadership to ensure continuous improvements to monitor, detect and mitigation capabilities. You will use your expertise to monitor SIEM and logging environments for security events and alerts to potential (or active) threats, intrusions, and/or compromises. You will work to understand the global threat landscape by working with Target Cyber Threat Intel team to maintain awareness. You will assist with triaging service requests from customers and internal teams and will escalany cyber security events according to Target’s Cyber Security Incident Response Plan. Additionally, you will assist with containment of threats and remediation of environment during or after an incident. You’ll act as a participant during Cyber Hunt activities at the direction of one or more Target Incident Commanders. You will leverage your reporting expertise and document event analysis and will write comprehensive reports of incident investigations.

Core responsibilities of this job are described within this job description. Job duties may change at any time due to business needs.

Note: This is a shift position eligible for 2 CSIRT shift openings. If you are applying for this role, you acknowledge and accept the days and times of the assigned shift.

Shift 1: 05:30 - 15:30 CT, Sunday to Wednesday

Shift 3: 05:30 - 15:30 CT, Tuesday to Friday

About You

• Four-year degree or equivalent experience
• 2+ years of experience in a Security Operations Centers or Cyber Security Incident Response Teams in lieu of education requirement
• Security certification (e.g. Security+, GCIA, GCIH, CISSP)
• Experience managing cases with enterprise SOAR, SIEM and/or Incident Management systems
• Experience supporting network and host investigations
• Ability to demonstrate analytical expertise, close attention to detail, excellent critical thinking, logic, and adaptive learning
• Excellent written and oral communication skills
• Thorough understanding of fundamental security and network concepts (Operating systems, intrusion/detection, TCP/IP, ports, etc.)
• Willing to work in a team-oriented environment
• Experience with host and network-based security tools preferred
• Experience with network monitoring in a SOC environment preferred

Work Arrangement: This position will operate as a Hybrid/Flex for Your Day work arrangement based on Target’s needs. A Hybrid/Flex for Your Day work arrangement means the team member’s core role will need to be performed both onsite at the Target HQ MN location the role is assigned to and virtually, depending upon what your role, team and tasks require for that day. Work duties cannot be performed outside of the country of the primary work location, unless otherwise prescribed by Target. Click here if you are curious to learn more about Minnesota.

Benefits Eligibility

Please paste this url into your preferred browser to learn about benefits eligibility for this role: https://tgt.biz/BenefitsForYou_D

Americans With Disabilities Act (ADA)

In compliance with state and federal laws, Target will make reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please reach out to [e-mail]. Non-accommodation-related requests, such as application follow-ups or technical issues, will not be addressed through this channel.