Senior Incident Response Engineer - Cyber Security

RXinsider LTD.; Philadelphia (Philadelphia County); On-site; USD 90,000 - 150,000; Full time

Job summary

Elsevier is expanding its Global InfoSec Security Incident Response team. As a Security Incident Response Engineer, you will join the internal security support group to assist with incident response investigations and remediation guidance.

You will help scope incidents, analyze data from threat tools, and coordinate responses with other security teams. The role emphasizes runbook development, containment activities, and staying current on threats and vulnerabilities.

Qualifications

• Experience in cybersecurity incident response or related fields.
• Ability to analyze, triage, scope, contain and remediate security incidents.
• Current knowledge of security tools, technologies and processes.
• Experience with cloud providers and cloud security in multi-cloud or hybrid deployments.
• Skills in automation using scripting languages.

Responsibilities

• Assist in scoping security incidents and identify indicators of attack and compromise.
• Analyze incident data from threat analytics tools.
• Communicate recommendations based on incident analysis.
• Coordinate responses with security and consulting teams.
• Develop and implement runbooks and techniques for Incident Response.
• Perform security triage and analysis on endpoints, servers, and networks.
• Contain incidents and drive short-term resolutions.
• Maintain knowledge of threat landscape and vulnerabilities.
• Investigate root causes of complex incidents.
• Maintain confidentiality.

Skills

Incident response

Threat triage

Cloud security (multi-cloud)

Automation (PowerShell, Python, Java)

Linux administration

Network security

Tools

PowerShell

Python

Java

Job description

About the role, Elsevier is expanding its Global InfoSec Security Incident Response team. As a Security Incident Response Engineer, you will play a crucial role in our internal security support team, assisting with incident response investigations.

This team is entrusted with analyzing, triaging, scoping, containing, and providing guidance for remediation, as well as determining the root cause of security incidents. This team also is empowered by collecting and analyzing security incident-related data to identify indicators of attack and compromise.

Responsibilities:

• Assisting in scoping security incidents and identifying indicators of attack and compromise.
• Analyzing incident data from threat analytics tools.
• Communicating recommendations and guidance based on security incident analysis.
• Coordinating responses to security incidents with other security and consulting teams.
• Developing, documenting, and implementing runbooks, capabilities, and techniques for Incident Response.
• Performing security triage and analysis on endpoint, server, and network infrastructure.
• Conducting activities necessary for immediate containment and short-term resolution of incidents.
• Maintaining current knowledge of the threat landscape, emerging security threats, and vulnerabilities.
• Investigating the root cause of complex security incidents.
• Maintaining a high level of confidentiality.

Requirements

• Possess experience in cybersecurity incident response or related fields.
• Proven ability to analyze, triage, scope, contain, and remediate security incidents.
• Have current and extensive knowledge of security technologies, tools, and processes.
• Experience with major cloud providers, including cloud security, networking, and multi-cloud or hybrid deployments.
• Have current skills in automation using PowerShell, Python, Java, or similar languages.
• Experience in Linux and/or Mac administration. Experience in Network Security Administration or Systems Administration.
• Experience supporting large, complex, and geographically distributed enterprise environments.

Preferred certifications: CISSP, CISM, SANS, GIAC, ethical hacking/penetration tester, or security risk assessment.

Elsevier employs 10,000 people worldwide, including over 2,500 technologists. We have supported the work of our research and health partners for more than 140 years. Growing from our roots in publishing, we offer knowledge and valuable analytics that help our users make breakthroughs and drive societal progress.