Senior Incident Response Engineer

Elsevier; New York (NY); Remote; USD 78,000 - 140,000; Full time

Benefits offered by this job

Annual incentive bonus

Country-specific benefits

Job summary

Elsevier seeks a senior cyber security incident response expert to join the global information security team. You will lead investigations, research threats, and develop incident response plans across cloud and on-prem environments.

You will also produce detailed incident reports, collect intelligence to detect threats, and help optimize security controls while collaborating with peer groups to safeguard assets and data.

Qualifications

• Advanced knowledge of cloud-agnostic security architectures.
• Experience in forensic and incident-response investigations.
• Understanding of incident response workflow and risk mitigation.
• Ability to analyze security events for anomalies and emerging threats.
• Ability to develop and implement security improvements and remediation programs.
• Experience with vulnerability assessment and malware analysis.
• Investigation in cloud and web-based environments.
• Certifications such as CISSP, CISM, GIAC, SANS or ISACA preferred.

Responsibilities

• Leading the full life-cycle of incident response investigations.
• Developing and executing security incident response plans.
• Developing comprehensive incident reports and investigation summaries.
• Collecting intelligence to proactively detect high-confidence threats.
• Analyzing and tuning security controls, scripting mitigation rules, and troubleshooting issues.
• Reviewing tools and processes to strengthen security capabilities.
• Leading analysis of security events and collaborating to safeguard assets.

Skills

Cloud security

Incident response

Forensic investigations

Threat intelligence

Malware analysis

Vulnerability assessment

Education

CISSP

CISM

GIAC

Job description

Are you looking for a unique Cyber Security role whereby you will provide key insight and research into new threats, exploits, and mitigation techniques? Do you consider yourself an innovator in threat detection?

About the role

You will be entrusted as the senior most technical member of incident response team for our global information security organization.

About the team

This global team supports the Information Security department’s goals and objectives by addressing escalations, and evaluation of technology controls providing key insight and research in new threats, exploits, and mitigation techniques.

Key Responsibilities

• Helping improve the resilience and readiness of security protection and mitigation technologies and processes which ensure the confidentiality, integrity, and availability of the organization’s assets, information, data, and IT services in an efficient manner.
• Developing and execute security incident response plans, conduct cyber forensic investigations on physical endpoints and cloud platforms, independently lead the full life-cycle of incident response investigations of all reported security incidents.
• Developing comprehensive incident reports and investigation summaries.
• Develop and collect intelligence to proactively detect and identify high-confidence threats to the brand, service infrastructure and enterprise users and systems.
• Analyzing/validating security control requirements and tuning, defining the mitigation rules, scripting and performing changes or mitigating attacks, and assisting with troubleshooting support related to any issues which may arise from security detection or protection technologies.
• Assisting with reviewing existing tools, applications, and processes to help strengthen and optimize current security capabilities, as well as identifying any gaps or technical solutions to further enhance the team’s effectiveness.
• Leading analysis and review security events for anomalous activity, collaborate with respective peer groups to take appropriate action to safeguard company information assets against current and foreseen threats.

Requirements

• Possess advanced knowledge of security of cloud agnostic infrastructure.
• Have the ability to conduct forensic and incident response investigations.
• Understanding of incident response and risk mitigation workflow and planning.
• Able to participate in the analysis of security events for anomalous activity. Identification of emerging security threats.
• Able to develop and implement security improvement and remediation programs.
• Possess vulnerability assessment, exploitation techniques, malware reverse engineering, threat analysis, and security threat and incident reporting.
• Able to participate in the investigation and navigation in Cloud and Web-based environments.
• Possess any of the following Licensing/certification : CCFE, GCFE, CISSP, CISM, SANS, GIAC, ISACA, CSRIC (or related), ethical hacking/penetration tester certification, and/or security risk assessment certification

Elsevier is a renowned global information analytics company that primarily focuses on providing scientific, technical, and medical (STM) research content, tools, and services. It is one of the largest publishers of academic journals and scholarly literature in the world.

Elsevier operates in various domains, including science, technology, medicine, social sciences, and more. They publish a vast number of peer-reviewed journals covering a wide range of disciplines. These journals act as platforms for researchers and academics to share their findings and contribute to the advancement of knowledge in their respective fields.

In addition to publishing, Elsevier offers a suite of digital solutions and services to support researchers, scientists, and professionals in their work. They provide online platforms like ScienceDirect, Scopus, and Mendeley, which offer access to a vast repository of scholarly articles, research papers, and other scientific content. These platforms often serve as essential resources for software developers seeking to stay updated with the latest scientific advancements.

Primary Location Base Pay Range: Home based-New Jersey $89,012 - $142,188.

U.S. National Base Pay Range: $78,800 - $131,300. Geographic differentials may apply in some locations to better reflect local market rates.

This job is eligible for an annual incentive bonus.

We know your well-being and happiness are key to a long and successful career. We are delighted to offer country specific benefits.

We are an equal opportunity employer: qualified applicants are considered for and treated during employment without regard to race, color, creed, religion, sex, national origin, citizenship status, disability status, protected veteran status, age, marital status, sexual orientation, gender identity, genetic information, or any other characteristic protected by law. USA Job Seekers: EEO Know Your Rights.

Please read our Candidate Privacy Policy.