Cybersecurity Incident Response Analyst

Global Sports Jobs Limited; Los Angeles (CA); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Competitive compensation

Medical and life insurance

Paid vacation and holidays

Employee assistance program

Job summary

Creative Artists Agency (CAA) is seeking a hands-on Information Security professional in Los Angeles to lead incident response, threat hunting, and forensics. You'll develop runbooks, coordinate with tech and business teams, and drive improvements across cloud and on-prem environments.

Ideal candidates have 3+ years in IR or related roles, strong Windows/Linux forensics, and a solid understanding of security controls and the NIST framework.

Qualifications

• Minimum 3 years in IT with hands-on incident response, threat hunting, or forensics experience.
• Bachelor's or master's degree in a relevant field.
• Strong background with Windows/Linux forensics, network traffic analysis, and log analysis.

Responsibilities

• Conduct day-to-day incident response activities in a global environment.
• Design and implement runbooks and playbooks for IR.
• Coordinate with technical and business stakeholders during IR processes.
• Perform host, cloud, network, memory, or log analysis to support investigations.
• Identify and mitigate information security threats and improve controls.

Skills

Incident response

Threat hunting

Forensics

Cloud security

Log analysis

Education

Bachelor's or Master's degree in a relevant field

Tools

Windows forensics

Unix/Linux forensics

pcap/log analysis

Job description

About the Role

This is a hands‑on security position working within the Information Security group and with the internal IT department at large. Its core focus is to ensure consistent, measurable end-to-end triage and closure of security-related events, with the successful candidate assessing, developing, and deploying detection capabilities that protect enterprise systems and data. The role sits within a fast-paced environment that is commonly on the leading edge of technology, including early adoption of various cloud services and the challenges of integrating those services into the security practice. The postholder is a key part of efforts to build and support a defensible environment in a highly collaborative organisation.

Key Responsibilities

• Conduct day-to-day incident response activities as well as additional SOC-related detection and response activities as required for a global environment.
• Design, engineer, and implement runbooks and playbooks for incident response.
• Coordinate with both technical and business stakeholders during the incident response process.
• Perform host-based, cloud-based, network-based, memory, or log analysis and/or forensics in support of incident response investigations.
• Play an active role in security incident response efforts, working to identify and mitigate information security threats.
• Review security information, event logs, and reports, and provide findings and recommendations.
• Use input from IRM leadership and key security metrics to ensure technical security controls are meeting desired objectives, implementing a process of continual review and improvement to ensure the measurable effectiveness of technical controls.
• Take on other projects or duties as assigned, including periodic on-call.

Required Experience & Qualifications

• A minimum of 3 years in information technology, ideally with 2 years' experience in a hands‑on incident response, threat hunting, or forensics role.
• A bachelor's or master's degree in a relevant field of work.
• A strong technical background with experience in at least two of the following: Windows disk and memory forensics; network traffic analysis (netflow, pcap); log analysis; Unix or Linux disk and memory forensics; malware analysis, both static and dynamic.
• A strong understanding of the fundamental operations of servers, operating systems, networks, firewalls, cloud applications, and infrastructure.
• Expertise building workflows and playbooks to facilitate the incident response process.
• An understanding of the NIST framework and using a continuous improvement loop.
• Experience building and managing frameworks to test and validate the effective operation of security controls, measuring the ability to respond to threats and attacks at the earliest point in the kill chain.
• A passion for cyber security, threat detection, threat hunting, and incident response.

Workplace

This position is based in the Los Angeles office.

Salary

• The salary may vary based upon factors including, but not limited to, relevant experience, time in the role, business sector, and geographic location, among other criteria.

Benefits & Perks

• Competitive compensation and benefits package for all regular full-time employees.
• Benefits where the company pays 80%-100% of the cost include medical, basic life and AD&D insurance, telemedicine, employee assistance and mental health counselling in person, virtually or through text, paid vacation/holidays, paid sick time, paid parental leave and other paid leaves of absence, NICU leave, bereavement resources, adoption benefits, educational assistance, mental health resources
• And an employee assistance plan.
• Voluntary benefits employees may elect to participate in include dental and vision insurance, a 401K plan, flexible spending accounts (health care and dependent care), a health savings account, and voluntary life and AD&D insurance.
• Employee perks include commuter benefits.
• Eligibility for a discretionary bonus.
• Other statutory mandated benefits are also offered.

About the Company

Creative Artists Agency (CAA) is the leading entertainment and sports agency, with global expertise in filmed and live entertainment, digital media, publishing, sponsorship sales and endorsements, media finance, consumer investing, fashion, brand management and consumer product licensing, and philanthropy. Founded in 1975, CAA is headquartered in Los Angeles and has offices in New York, London, Nashville, Shanghai, Beijing, Chicago, Washington D.C., Singapore, Toronto, Denver, Charlotte, Jacksonville, and Atlanta, among other locations globally.