Senior Incident Response Engineer - Cyber Security

Elsevier; Philadelphia (Philadelphia County); On-site; USD 110,000 - 190,000; Full time

Job summary

Elsevier is expanding its Global InfoSec Security Incident Response team. We are seeking a Security Incident Response Engineer to analyze, triage, scope, contain, and guide remediation for security incidents across our global enterprise.

You will work with security and consulting teams to develop runbooks, perform incident analysis on endpoints, servers, and networks, and stay current on threats. Strong automation skills and cloud experience are highly valued.

Qualifications

• Experience in cybersecurity incident response or related fields.
• Ability to analyze, triage, scope, contain, and remediate security incidents.
• Knowledge of security technologies, tools, and processes.
• Experience with major cloud providers and multi-cloud or hybrid deployments.
• Automation skills with PowerShell, Python, Java, or similar languages.
• Experience with Linux and/or Mac administration; network or systems administration.
• Experience supporting large, distributed enterprise environments.
• Preferred certifications such as CISSP, CISM, SANS, GIAC, or ethical hacking.

Responsibilities

• Assist in scoping security incidents and identifying indicators of attack and compromise.
• Analyze incident data from threat analytics tools.
• Communicate recommendations and guidance based on security incident analysis.
• Coordinate responses to security incidents with other security and consulting teams.
• Develop, document, and implement runbooks, capabilities, and techniques for Incident Response.
• Perform security triage and analysis on endpoint, server, and network infrastructure.
• Conduct activities necessary for immediate containment and short-term resolution of incidents.
• Maintain knowledge of the threat landscape, emerging threats, and vulnerabilities.
• Investigate the root cause of complex security incidents.

Skills

Incident response

Threat analysis

Endpoint and network triage

Cloud security

Automation (PowerShell/Python/Java)

Linux/mac administration

Remediation strategy

Communicating findings

Tools

Threat analytics tools

Job description

About the role, Elsevier is expanding its Global InfoSec Security Incident Response team. As a Security Incident Response Engineer, you will play a crucial role in our internal security support team, assisting with incident response investigations.

This team is entrusted with analyzing, triaging, scoping, containing, and providing guidance for remediation, as well as determining the root cause of security incidents. This team also is empowered by collecting and analyzing security incident-related data to identify indicators of attack and compromise.

Responsibilities:

• Assisting in scoping security incidents and identifying indicators of attack and compromise.
• Analyzing incident data from threat analytics tools.
• Communicating recommendations and guidance based on security incident analysis.
• Coordinating responses to security incidents with other security and consulting teams.
• Developing, documenting, and implementing runbooks, capabilities, and techniques for Incident Response.
• Performing security triage and analysis on endpoint, server, and network infrastructure.
• Conducting activities necessary for immediate containment and short-term resolution of incidents.
• Maintaining current knowledge of the threat landscape, emerging security threats, and vulnerabilities.
• Investigating the root cause of complex security incidents.
• Maintaining a high level of confidentiality.

Requirements

• Possess experience in cybersecurity incident response or related fields.
• Proven ability to analyze, triage, scope, contain, and remediate security incidents.
• Have current and extensive knowledge of security technologies, tools, and processes.
• Experience with major cloud providers, including cloud security, networking, and multi-cloud or hybrid deployments.
• Have current skills in automation using PowerShell, Python, Java, or similar languages.
• Experience in Linux and/or Mac administration. Experience in Network Security Administration or Systems Administration.
• Experience supporting large, complex, and geographically distributed enterprise environments.

Preferred certifications: CISSP, CISM, SANS, GIAC, ethical hacking/penetration tester, or security risk assessment.

Elsevier employs 10,000 people worldwide, including over 2,500 technologists. We have supported the work of our research and health partners for more than 140 years. Growing from our roots in publishing, we offer knowledge and valuable analytics that help our users make breakthroughs and drive societal progress.