Incident Response Analyst

firstPRO US; Boston (MA); Hybrid; USD 100,000 - 150,000; Full time

Job summary

Our client, firstPRO US, is seeking a Security Incident Response Analyst in Boston, MA for a contract-to-hire role with hybrid work options. You will analyze security data, drive remediation actions, and improve incident response processes to strengthen the bank's defenses.

The role requires collaboration with senior engineers and management, creation of security documentation, and ongoing refinement of IR capabilities across network, endpoint, and applications, with a focus on stakeholder

Responsibilities

• Analyze data, make recommendations for remedial action and/or security network enhancements based on detailed analysis and ensure proper communication of issues and/or recommendations to both technical and non-technical audiences.
• Research adversarial TTPs and develop novel detection and prevention techniques across multiple environments including network, endpoint and applications, particularly through use of the bank SIEM solution.
• Monitor events and alerts generated by firewalls, SIEMs, IDS and networking equipment; identify security issues and determine root cause via a consistent, logical approach.
• Work with senior engineers and technology management to define and drive security-based process improvements.
• Create and/or maintain security documentation including security architecture diagrams, procedures, and Bank security standards

Job description

Our client is seeking an Security Incident Response Analyst in Boston, MA. This is a contract to hire role and hybrid.

The role plans the response to complex security threats and enhances the incident management framework. This role drives initiatives that bolster the banks cybersecurity defenses and fosters a culture of continuous improvement and resilience, refines IR processes, and communicates with stakeholders at all levels.

MAJOR RESPONSIBILITIES :

• Analyze data, make recommendations for remedial action and/or security network enhancements based on detailed analysis and ensure proper communication of issues and/or recommendations to both technical and non-technical audiences. This includes remediation efforts for day to day reported trouble tickets from internal customers.
• Research adversarial Tactics, Techniques and Procedures (TTPs) and developing novel detection and prevention techniques across multiple environments including network, endpoint and applications, particularly through use of the bank SIEM solution.
• Monitor events and alerts generated by firewalls, SIEMs, IDS and networking equipment Methodically identify system security issues and determine root cause via a consistent, logical approach.
• Work with senior engineers and technology management, define and drive security-based process improvements.
• Create and/or maintain security documentation including security architecture diagrams, procedures, and Bank security standards