Senior Cyber Incident Responder - Lead IR & Forensics Remote

Highmark Health; Juneau (AK); On-site; USD 86,000 - 139,000; Full time

Job summary

Highmark Health is seeking a Senior Cyber Incident Responder to serve as the top investigator in the Cyber Fusion Center, capable of leading investigations and ensuring CIRP adherence. This role interfaces with internal teams to determine scope and resources, and delegates activities based on complexity and capacity.

The candidate will act as a subject matter expert, guiding incident handling, forensic collection, and remediation across enterprise systems.

Qualifications

• 5 years of Malware Analysis, Digital Forensics, Data/Network Analysis, Penetration testing, Trends Analysis, or Information Assurance.
• 5 years of Cyber Incident Handling.

Responsibilities

• Coordinate and provide expert technical support to enterprise-wide cyber defense technicians to resolve cyber defense incidents. Handle escalated incidents serving as subject matter expert.
• Correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation.
• Analyze log files from a variety of sources (e.g., host logs, network traffic logs, firewall logs, IDS logs) to identify possible threats to network security.
• Perform cyber defense incident triage, to include determining scope, urgency, and potential impact, identifying the specific vulnerability, and making recommendations that enable expeditious remediation.
• Perform cyber defense trend analysis and reporting, making recommendations to leadership to mitigate future risks.
• Perform initial, forensically sound collection of images and inspect to discern possible mitigation/remediation on enterprise systems.
• Perform real-time cyber defense incident handling tasks to support deployable Incident Response Teams (IRTs).
• Receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts.
• Track and document cyber defense incidents from initial detection through final resolution.
• Other duties as assigned or requested.

Skills

Malware Analysis

Digital Forensics

Data/Network Analysis

Penetration testing

Trends Analysis

Information Assurance

Cyber Incident Handling

Identifying malware

Preserving evidence integrity

Securing network communications

Vulnerability recognition

Security event correlation

Incident response design

Education

Bachelor's in computer science, cybersecurity, information technology, software engineering, information systems, computer engineering, or related field

6 years of information security and systems analysis with HITRUST CSF or NIST 800-83 experience

Masters in computer science, cybersecurity, information technology, software engineering, information systems, computer engineering, or related field

Tools

Security Event Correlation Tools

Job description

Highmark Health is seeking a Senior Cyber Incident Responder to serve as the top investigator in the Cyber Fusion Center, capable of leading investigations and ensuring CIRP adherence. This role interfaces with internal teams to determine scope and resources, and delegates activities based on complexity and capacity.

The candidate will act as a subject matter expert, guiding incident handling, forensic collection, and remediation across enterprise systems.