Cybersecurity DFIR Analyst — Threat Hunting & Incident Response

Intercontinental Exchange; Provo (UT); On-site; USD 70,000 - 95,000; Full time

Job summary

Intercontinental Exchange (ICE) is seeking professionals to join its Cybersecurity DFIR team in Provo, Utah. The team defends critical financial infrastructure from global cyber threats, leveraging a growing set of controls that require technical proficiency, tenacity, and strong communication skills.

The role focuses on security analytics, incident management, endpoint forensics, counter measures, proactive threat hunting, behavioral analysis, and intrusion detection.

Qualifications

• Understanding of networking and its application.
• University degree in related discipline or minimum one year in an Information Security Role.
• Hands on experience with Windows and Linux.

Responsibilities

• Security Analytics - Distill actionable information from large data sets for reporting, hunting, and anomaly detection.
• Incident Management – Detect, document, investigate, and resolve security incidents efficiently.
• Endpoint Forensics - Construct meaningful incident timelines from forensic artifact analysis.
• Counter Measures - Design and implement preventative and corrective controls to counteract emerging threats.
• Proactive Threat Hunting - Develop and execute focused plans to discover advanced threats that evade traditional security controls.
• Behavioral Analysis - Develop and implement criteria to identify anomalous user behavior potentially indicating insider threat activity.
• Intrusion Detection - Develop and tune network anomaly control capability to produce reliable actionable data.

Skills

Teamwork

Problem solving

Communication

Professionalism

Education

University degree or 1 year security experience

Tools

Windows

Linux

Job description

Intercontinental Exchange (ICE) is seeking professionals to join its Cybersecurity DFIR team in Provo, Utah. The team defends critical financial infrastructure from global cyber threats, leveraging a growing set of controls that require technical proficiency, tenacity, and strong communication skills.

The role focuses on security analytics, incident management, endpoint forensics, counter measures, proactive threat hunting, behavioral analysis, and intrusion detection.