Incident Responder II

Summary

The Incident Responder II supports Osaic’s, home office, and cybersecurity operations. This role combines technical competence with hands-on experience to ensure secure, efficient processes across the organization. As an Incident Responder II, you will monitor security-related events, triage potential incidents, and respond to confirmed incidents, as necessary. You will work closely with other members of Osaic – primarily within the Security, Privacy, Legal and Infrastructure organizations. As an Incident Responder II, you will be expected to work independently and proactively.

Responsibilities

• Detect, analyze, and address cybersecurity incidents using SIEM, EDR, and other security solutions.
• Conduct root cause investigations and create remediation strategies for security events.
• Record incident response steps and keep thorough documentation for compliance and reporting purposes.
• Create incident reports, detailing the events of the incident to include attack vectors, identifying vulnerabilities, gaps, and outlining suggested remediation steps.
• Threat Detection & Analysis:
• Track security alerts and logs from both Windows and Linux platforms.
• Perform forensic examinations on compromised systems, including memory, disk, and network evidence.
• Identify indicators of compromise (IOCs) and update detection rules as needed.
• Containment & Recovery:
• Apply containment measures to reduce the effects of security breaches.
• Work with system administrators to recover impacted systems and verify their integrity after incidents.
• Continuous Improvement:
• Develop and update incident response playbooks and processes.
• Partner with threat intelligence teams to anticipate emerging threats.
• Suggest improvements to security across all environments.
• Compliance & Reporting:
• Ensure incident handling is consistent with regulatory and company guidelines.
• Create comprehensive incident reports for internal review and audits.
• All other duties as assigned.

Education Requirements

• Bachelor’s degree preferred, high school diploma (or equivalent) in combination with significant experience will be considered in lieu of degree.
• A minimum of a high school diploma or equivalent is required.

Basic Requirements

• 2+ years of cybersecurity experience, including roles in SOC, SIEM engineering, vulnerability management, incident response, etc.
• Hands on experience with SIEM platforms, EDR tools, incident response platforms, etc.
• Proficiency in monitoring and triaging security alerts
• Basic experience with forensic investigation
• Familiarity with vulnerability scanning tools, threat intelligence platforms, IAM platforms, encryption, email security, etc.
• Excellent communication and organizational skills.
• Quick learner with basic technical skills to efficiently navigate through various systems.
• Strong customer focus orientation.
• High attention to detail, analytical mindset, and problem-solving skills.
• Be able to work independently and maintain elevated levels of quality.
• Self-motivated individual capable of meeting departmental expectations and deadlines.
• Ability to participate and contribute to a team environment.

Preferred Requirements

• 5+ years' experience in financial services operations or broker-dealer environment.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science or related field.
• Higher level certifications, including CompTIA Security+, CySA+, GSEC, or CISSP, etc.
• Understanding of major security frameworks like NIST CSF, ISO 27001, SOC 2, PCI-DSS, HIPAA
• Understanding SQL for querying LMS as part of ongoing investigations.

Equal Opportunity Employer

Osaic is an equal opportunity employer. We celebrate diversity in our workplace and we hire the most qualified candidates without regard for age, ethnicity, gender, gender identity or expression, language differences, nationality or national origin, family or marital status, physical, mental, and developmental abilities (or the perception of a disability), genetic information, race, religion or belief, sexual orientation, skin color, social or economic class, education, work and behavioral styles, political affiliation, military service, caste, or any other characteristic protected by law.