Lead Cyber Incident Response Specialist

Highmark Health; Columbus (OH); Hybrid; USD 86,000 - 139,000; Full time

Job summary

Highmark Health in Columbus, OH is seeking a Senior Cyber Incident Responder to lead investigations and ensure CIRP adherence. The role interfaces with internal teams to determine scope and resources, and delegates activities by complexity and capacity.

The ideal candidate has 5+ years in malware analysis, forensics, and incident handling, with a bachelor's in a related field. Office or remote-based work options apply.

Qualifications

• 5 years of Malware Analysis, Digital Forensics, Data/Network Analysis, Penetration testing, Trends Analysis, or Information Assurance
• 5 years of Cyber Incident Handling
• Bachelor's in computer science, cybersecurity, information technology, software engineering, information systems, computer engineering, or other related field
• 6 years of information security experience with HITRUST CSF or NIST 800-83 as substitution

Responsibilities

• Coordinate and provide expert technical support to enterprise-wide cyber defense technicians to resolve cyber defense incidents.
• Correlate incident data to identify vulnerabilities and enable expeditious remediation.
• Analyze log files from hosts, network traffic, firewalls, and IDS to identify threats.
• Perform cyber defense incident triage, determining scope, urgency, and potential impact.
• Perform cyber defense trend analysis and reporting to leadership.
• Perform initial, forensically sound collection of images and inspect for remediation.
• Handle real-time cyber defense incident tasks to support deployable IRTs.
• Receive and analyze network alerts to determine possible causes.
• Track and document cyber defense incidents from detection to final resolution.

Education

Bachelor's in Computer Science / Cybersecurity / IT

Master's in Computer Science / Cybersecurity

HITRUST CSF / NIST CSF experience

Job description

Highmark Health in Columbus, OH is seeking a Senior Cyber Incident Responder to lead investigations and ensure CIRP adherence. The role interfaces with internal teams to determine scope and resources, and delegates activities by complexity and capacity.

The ideal candidate has 5+ years in malware analysis, forensics, and incident handling, with a bachelor's in a related field. Office or remote-based work options apply.