Senior Engineer, Cybersecurity DFIR

ICE; Provo (UT); On-site; USD 80,000 - 110,000; Full time

Job summary

A financial services company is looking for a Cybersecurity Specialist focused on Digital Forensics and Incident Response in Provo, Utah. The role involves defending critical financial infrastructure against cyber threats and requires 5+ years of relevant experience, hands-on skills in Systems Administration, and knowledge of cloud security. Candidates should possess a degree in Engineering, MIS, or similar, alongside relevant certifications. This position offers an opportunity to work in a dynamic cybersecurity environment.

Qualifications

• 5+ years of relevant experience.
• Hands-on experience with Systems Administration.
• Deep understanding of networking.
• Experience in cloud or container security including incident response.
• Experience implementing security controls in an enterprise environment.

Responsibilities

• Efficiently distill actionable information from large data sets.
• Detect, document, investigate, and resolve security incidents.
• Construct meaningful incident timelines.
• Design and implement preventative and corrective controls.
• Develop and execute focused plans to discover advanced threats.
• Develop and implement criteria to identify anomalous user behavior.
• Develop and tune network anomaly control capability.
• Proactively search for unknown threats.

Skills

Security Analytics

Incident Management

Endpoint Forensics

Counter Measures

Proactive Threat Hunting

Behavioral Analysis

Intrusion Detection

Threat Hunting

Education

University degree in Engineering, MIS, CIS, or related discipline

Tools

Technical security certifications

Job description

Job Purpose

The ICE Cybersecurity Digital Forensics and Incident Response (DFIR) team is responsible for defending critical financial infrastructure from Global Cyber threats. We leverage an evolving arsenal of controls that require technical proficiency as well as tenacity, professionalism, and strong communication skills.

Responsibilities

• Security Analytics - Efficiently distill actionable information from large data sets for reporting, hunting, and anomaly detection
• Incident Management – Detect, document, investigate, and resolve security incidents in an efficient manner
• Endpoint Forensics - Construct meaningful incident timelines from forensic artifact analysis
• Counter Measures - Ability to design and implement preventative and corrective controls to counteract emerging threats
• Proactive Threat Hunting - Develop and execute focused plans to discover advanced threats that evade traditional security controls
• Behavioral Analysis - Develop and implement criteria to identify anomalous user behavior leading indicating insider threat activity
• Intrusion Detection - Develop and tune network anomaly control capability to produce reliable actionable data
• Threat Hunting - Proactively search for unknown threats within the environment.

Knowledge and Experience

• University degree in Engineering, MIS, CIS, or related discipline; or equivalent years of experience
• 5+ years of relevant experience
• Hands-on experience with Systems Administration
• Deep understanding of networking and its application
• Experience in cloud or container security, including incident response in cloud and hybrid deployments.
• Relevant technical security certifications
• Experience implementing security controls in an enterprise environment

Intercontinental Exchange, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to legally protected characteristics.