Incident Response Analyst - Overnight Shift

About the role

The NIRT, a national service provider for the FRS, delivers effective intrusion detection, incident response, forensics, security intelligence, threat assessment, and penetration testing services. The role is for an incident triage and response professional.

Responsibilities

• Investigate and respond to security events within the FRS with minimal oversight.
• Analyze a large volume of security event data from multiple sources to identify suspicious and malicious activity.
• Conduct network forensics.
• Complete projects and tasks associated with security monitoring, detection, and incident response.
• Analyze all relevant data sources for attack indicators and potential network and host compromises.
• Respond to different attack vectors such as data exfiltration, DDoS, malware, insider risk, and phishing.
• Develop scripts and tools to improve the efficiency of incident detection and response processes.
• Interface with NIRT customers and stakeholders.

Qualifications

• Bachelor's Degree or equivalent experience with 3+ years of relevant work experience.
• In-depth understanding of a variety of information technologies and information security topics.
• Specifically, this should include the following:
• SIEM/SOAR utilization skills to analyze security events from multiple monitoring and logging sources to identify, investigate and confirm suspicious activity.
• Knowledge of incident response and handling methodologies.
• Knowledge of common adversary tactics, techniques, and procedures (TTPs).
• Knowledge of cyber threats and vulnerabilities.
• Knowledge of cyber-attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).
• Knowledge of which system files (e.g., log files, registry files, configuration files) contain relevant information and where to find those system files).
• Knowledge to analyze all relevant data sources for attack indicators and potential network and host compromises.
• Knowledge of current security threats, techniques, and landscape, and a dedicated approach to research current information security landscape.
• Understanding of IT Infrastructure designs, technologies, products, and services. This should include knowledge of networking protocols, firewall functionality, host and network intrusion detection systems, operating systems, databases, encryption, load balancing, and other technologies.
• Hold one or more relevant security certifications/degrees and/or commensurate experience.
• Ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means, evaluate information for reliability, validity, and relevance, and function effectively in a dynamic, fast-paced environment.
• Ability to develop productive working relationships with a broad range of business and operational area professionals.

Additional Information

• Location(s): Boston, MA- New York, NY- Philadelphia, PA- Cleveland, OH- Richmond, VA- Atlanta, GA- Chicago, IL- St. Louis, MO- Minneapolis, MN- Kansas City, MO- Dallas, TX- San Francisco, CA
• How We Work: Location(s): Boston, MA- New York, NY- Philadelphia, PA- Cleveland, OH- Richmond, VA- Atlanta, GA- Chicago, IL- St. Louis, MO- Minneapolis, MN- Kansas City, MO- Dallas, TX- San Francisco, CA
• Work Schedule: Location(s): Boston, MA- New York, NY- Philadelphia, PA- Cleveland, OH- Richmond, VA- Atlanta, GA- Chicago, IL- St. Louis, MO- Minneapolis, MN- Kansas City, MO- Dallas, TX- San Francisco, CA
• Citizenship Requirements: United States citizenship is required for this position.
• Sponsorship: The Federal Reserve Bank of Kansas City will not sponsor a new applicant for employment authorization for this position. Applicants must be currently authorized to work in the United States without the need for visa sponsorship now or in the future.
• Job Exempt (Yes / No): Yes
• Family Group: Work
• Shift: Third (United States of America)