Info Security Specialist III (Chicago, IL - Third Shift)

BBG Ventures, LLC; Chicago (IL); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401k

Job summary

BBG Ventures, LLC seeks an Info Security Specialist III for the Chicago, IL area. The role focuses on proactive threat discovery on the 3rd shift (Mon–Fri, 1am–9:45am CT) within a large insurance-security program.

The ideal candidate has extensive incident response and MITRE ATT&CK experience, comfortable coordinating with SOC teams, and mentoring junior staff while advancing playbooks and detections.

Qualifications

• Typically five years of technical security experience across multiple platforms and networks.
• Industry certifications preferred (CISSP, GCFA, GCIH, GCFE) or equivalent.

Responsibilities

• Proactively identify adversary activity in the network on third shift and enable early detection.
• Collaborate with US SOC teams and other security functions on investigations and hunts.
• Perform real-time and historical analysis using CNA security tools (SIEM, EDR, IDS, etc.).
• Mentor junior staff and review analyses for quality and consistency.
• Develop and maintain playbooks and detection capabilities from investigations.

Skills

SOC operations

Log analysis

MITRE ATT&CK

Incident response

Communication

Mentoring juniors

Regulatory knowledge

Education

Five years security experience

Certifications (CISSP GCFA GCIH GCFE)

Tools

SIEM

SOAR

DFIR

Endpoint Protection

IDS/IPS

Email Gateway

Job description

Our customer is a large United States insurance company that is backed by more than 100 years of experience and provides insurance products and services for businesses and professionals in the United States., Canada and Europe. Headquartered in Chicago, IL, they have more than 20 US locations.

Our customer is seeking an Info Security Specialist III to support their ongoing business needs. This role is Chicago, IL.

3rd shift Monday through Friday, 1am to 9:45am CT

Key Responsibilities

• Individual contributor for third shift focused on proactively finding adversary activities in the network with the goal of discovery before they complete their mission.
• The ideal candidate would have skills and experience in log analysis, network traffic analysis, and MITRE attack framework.
• Part of the global IT security team working closely with the US SOCs teams.
• Performs a combination of duties in accordance with departmental guidelines.
• Conduct real-time and historical analysis using the full security suite owned by CNA including Endpoint Protection, SIEM, Firewall, Endpoint Detection & Response, Intrusion Detection Systems, Email Gateway, Web Content Filtering, Network Detection & Response, & Identity Management technology.
• Conduct incident response triage analysis on suspected hosts to determine potential ongoing attacks and its scope.
• Conduct analysis review of junior staff for quality control; mentor junior staff to encourage career growth and development.
• Stay on top of latest attacker tactics, techniques and procedure to discover sophisticated threats in the network.
• Collaborate with SOC, Intelligence, Incident Response and Enterprise Security Teams for incident investigations and hunt missions when possible.
• Identify visibility gaps in the network and recommend solutions.
• Develop, maintain and update playbooks, process, and detection capabilities based on real-time feedback from investigations.
• Coordinate escalation for advance forensics, malware reverse-engineering, and additional host review tasks to third party vendors.
• Articulate security incident details to business stakeholders and non-technical individuals.
• May perform additional duties as assigned

Skills

• Familiarity with SOC operations, scheduling, and tools including SIEM, SOAR, and DFIR products.
• Knowledge of the incident response lifecycle and cyber security leading practices.
• Solid understanding of security policy construction and publication.
• In-depth knowledge of regulations (i.e., SOX, privacy, etc.) and internal controls as they apply to IT.
• Ability to influence change in corporate understanding and adoption of information security concepts.
• Proven solid analytical and problem solving skills.
• Excellent communications and interpersonal skills and the ability to work effectively with peers, IT management and staff, and internal/external business partners/clients.
• Ability to manage various technical projects to completion.
• Advanced computer skills including Microsoft Office suite and other business-related software systems. Other technologies will apply dependent on business area supported.
• Preferred insurance industry knowledge.

Education

• Typically a minimum of five years of technical experience in the security aspects of multiple platforms, operating systems, software, communications and network protocols or an equivalent combination.
• Industry certifications preferred (CISSP, GCFA, GCIH, GCFE, or equivalent) or related discipline, or equivalent experience in Computer Science.

We offer a competitive salary range for this position. Most candidates who join our team are hired at the median of this range, ensuring fair and equitable compensation based on experience and qualifications.

Contractor benefits are available through our 3rd Party Employer of Record (Available upon completion of the waiting period for eligible engagements)

• Medical
• Dental
• Vision
• 401k

An Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.