Professional, Cyber Security-IND

Role Summary

The focus of the Professional Information Security is to distinguish, interrupt and suppress threat actors on enterprise networks. To execute this, you will use data analysis, threat intelligence, and cutting-edge security technologies. Working within the Security Operations Center Team at Ingram Micro, you will be responsible for detecting and assessing cyber security events and incidents across the enterprise environment. Threat Analysts will also participate in developing processes, procedures, training, etc. for new technologies. We seek a candidate to have a curious investigative mind, a passion in information security, and the ability to communicate complex ideas to varied audiences.

Responsibilities

• Investigate events and incidents to gather evidence and analyze in a comprehensive, consistent, and measurable manner

• Evaluate, respond, and mitigate alerts that originate from the SIEM and other security tools

• Hunt for suspicious and malicious threats within the environment

• Identify common false positives and make suggestions on tuning to reduce alert-fatigue

• Join forces with internal Security Incident Response Team (SIRT) during investigations

• Train and mentor other team members to develop a high-performing team

• Author investigation reports for technical and non-technical audience

Qualifications

• Two or more years of full-time professional experience in the Information Security field

• Experience working in an internal Security Operations Center (SOC) or Managed Security Service (MSS) Collaborate with Security Architecture, Engineering to Operationalize new security controls

• Have in depth working on security tools such as Security Incident and Event Management (SIEM), Endpoint Detection and Response (EDR), Anti-Virus,

• Familiarity with MITRE ATT&CK and methods to detect suspicious and malicious behavior

• Basic understanding of vulnerability assessment tools

• Previous experience as a point of escalation in a technical environment

One or more security related certifications preferred (e.g. Security+, GSEC, CEH, GMON, GCIH, CISSP