Senior Incident Response Analyst

Centene Corporation; Pennsylvania; On-site; USD 85,000 - 159,000; Full time

Job summary

An established industry player seeks a Senior Incident Response Analyst to enhance security measures and respond to incidents effectively. This role involves resolving security breaches, collaborating with various teams, and implementing preventative strategies to safeguard the organization. The ideal candidate will have substantial experience in cloud cybersecurity and a solid understanding of AWS and Azure environments. Join a forward-thinking company that values innovation and offers a competitive benefits package, including flexible work arrangements, to help you thrive in your career.

Benefits

Health insurance

401K plan

Stock purchase plans

Tuition reimbursement

Paid time off

Flexible work schedules

Qualifications

• 4-6 years of experience in Cloud cybersecurity and incident response.
• Intermediate understanding of AWS and Azure environments.
• Knowledge of tools and techniques used by threat actors.

Responsibilities

• Resolve security incidents and recommend enhancements to improve security.
• Execute enterprise-wide Incident Response Plan.
• Collaborate with Information Security teams and stakeholders.

Skills

Cloud cybersecurity experience

AWS

Azure

Incident triage and response

Analytical skills

Project management skills

Education

Bachelor's degree in quantitative or business field

Tools

CrowdStrike

MS Defender

Wiz

Wiz Defend

Job description

Join to apply for the Senior Incident Response Analyst role at Centene Corporation

1 week ago Be among the first 25 applicants

Join to apply for the Senior Incident Response Analyst role at Centene Corporation

You could be the one who changes everything for our 28 million members by using technology to improve health outcomes around the world. As a diversified, national organization, Centene's technology professionals have access to competitive benefits including a fresh perspective on workplace flexibility.

Position Purpose

Resolves security incidents, recommending enhancements to improve security, identifying common attack patterns to publicly exposed aspects of the organization's environment, and contributing to the implementation of scalable and preventative security measures. Executes enterprise-wide Incident Response Plan. Partners with business units to accomplish enterprise-wide remediation and develops and delivers presentations to senior leadership team.

• Reviews current configurations of Centene’s production information systems and networks against compliance standards.
• Prepares the prevention and resolution of security breaches and ensure incident and response management processes are initiated.
• Implements and discuss security service audit schedules, review access authorization, and perform the required access controls testing to identify security shortfalls.
• Designs of automated scripts, contingency plans, and other programmed responses which are launched when an attack against Centene’s systems has been detected.
• Collaborates with Information Security Architects, Information Security Engineers, and software or hardware stakeholders at Centene.
• Notifies internal and/or external teams according to agreed alert priority levels, escalation trees, triaging of security alerts, events, and notifications.
• Ties third party attack monitoring services and threat reporting services, into internal CIRT (Cyber Incident Response Team) communications systems.
• Performs post-mortem analysis with logs, network traffic flows, and other recorded information to identify intrusions by unauthorized parties, as well as unauthorized activities of authorized users.
• Performs other duties as assigned.
• Complies with all policies and standards.
  
  

Education/Experience

A Bachelor's degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science).

Requires 4 – 6 years of related experience.

Or equivalent experience acquired through accomplishments of applicable knowledge, duties, scope and skill reflective of the level of this position.

Technical Skills

• 4-6 years of Cloud cybersecurity experience performing incident triage and response
• Intermediate-to-advanced understanding of AWS and Azure environments
• Knowledge of tools, techniques, and processes (TTP) used by threat actors
• Knowledge of Indicators of compromise (IOC)
• Knowledge of Wiz & Wiz Defend
• Experience with Endpoint protection and enterprise detection & response software (such as CrowdStrike, MS Defender, etc.)
• Knowledge of Network and infrastructure technologies including routers, switches, firewalls, etc.
  
  

Soft Skills

• Intermediate - Seeks to acquire knowledge in area of specialty
• Intermediate - Ability to identify basic problems and procedural irregularities, collect data, establish facts, and draw valid conclusions
• Intermediate - Ability to work independently
• Intermediate - Demonstrated analytical skills
• Intermediate - Demonstrated project management skills
• Intermediate - Demonstrates a high level of accuracy, even under pressure
• Intermediate - Demonstrates excellent judgment and decision making skills
  
  

License/Certification

• SANS GIAC Security Essentials (GSEC), SANS GIAC Certified Intrusion Analyst (GCIA) or equivalent, SANS GIAC Certified Incident Handler (GCIH) or equivalent preferred
  
  

Pay Range $85,300.00 - $158,100.00 per year

Centene offers a comprehensive benefits package including competitive pay, health insurance, 401K and stock purchase plans, tuition reimbursement, paid time off plus holidays, and a flexible approach to work with remote, hybrid, field or office work schedules. Actual pay will be adjusted based on an individual's skills, experience, education, and other job-related factors permitted by law. Total compensation may also include additional forms of incentives.

Centene is an equal opportunity employer that is committed to diversity, and values the ways in which we are different. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or other characteristic protected by applicable law.

Qualified applicants with arrest or conviction records will be considered in accordance with the LA County Ordinance and the California Fair Chance Act

Seniority level

• Seniority level

  Not Applicable

Employment type

• Employment type

  Full-time

Job function

• Job function

  Management and Manufacturing

• Industries

  Hospitals and Health Care and Insurance

Referrals increase your chances of interviewing at Centene Corporation by 2x

Sign in to set job alerts for “Incident Analyst” roles.

Cybersecurity SOC Analyst - IT Security - Full Time

IT Security Analyst, Vulnerability Management Specialist - Remote

Programmer/Analyst - IT Oracle Applications - Full Time

Risk and Compliance Analyst - US Based Remote

Sr. Threat Hunting Intelligence Analyst (Remote - East Coast)

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.