Where is the work:Monday to Thursday, work onsite with your colleagues. Fridays, choose your work location, balancing what your work requires.
What you will do:- Take ownership of coordinating cyber security incidents in both IT and OT environments, helping guide response efforts, and coordinating activities across teams
- Quickly assess and prioritize threats, escalate critical incidents, and drive timely and effective incident resolution
- Document investigation findings including analyses of incidents with root cause, containment, and remediation/prevention recommendations, and coordinate after-action reviews and lessons learned activities across multiple teams
- Provide real-time insight into the prioritization and evaluation of relevant intelligence for Cybersecurity & Infrastructure to maintain pace with emerging risks and active threats related to the company's technology and vendor stack
- Create intelligence bulletins and analysis of critical and high-severity vulnerabilities that may impact the organization
- Research and disseminate analysis for industry-specific threat activity that will increase the organization's situational awareness, including executive reports and recommendations for preventative controls
- Enhance the organization's understanding of how threats and vulnerabilities can impose risk on users, data, and assets.
- Help build and mature existing CTI capabilities, processes, and platforms
What you will bring:- Bachelor's degree in a related field and/or equivalent working experience in cybersecurity
- Proven experience (5-7 years) in security operations or equivalent roles, including hands-on technical experience performing incident response and/or threat intelligence analysis
- Strong knowledge of attacker methodologies, tools, and techniques in the cyber security space
- A firm understanding of incident response processes, security analysis, and cybersecurity threat intelligence (CTI)
- Familiarity with cyber security frameworks such as NIST CSF and NIST SP 800-61
- Excellent problem-solving, analytical, and critical thinking skills
- Strong communication and interpersonal skills to effectively collaborate with different teams
- Advanced certifications such as those from SANS/GIAC, CISSP or CASP, and/or vendor-specific training and certifications are highly desirable
- Up-to-date knowledge of emerging cyber threats, attack vectors, and vulnerabilities
Annual Base Salary Range or Hourly Base Pay Range:$117,673.33 - $164,675.00
Compensation Type:Salary
Incentive Eligible:No
Sales Commission Eligible:No
Disclaimer: We strive to provide competitive compensation for this position, tailored to a variety of factors. The actual compensation will depend on elements such as seniority, merit, geographic location, education, experience, travel requirements, and union designation. Our compensation range is generally based on the national average for the country. Additionally, benefits may vary depending on the region, business alignment, union involvement, and employee status.
Thrive at work and at home:- Benefits kick in on DAY ONE for you and your family, including health insurance and holistic wellness programs that include generous incentives - WE DARE TO CARE!
- Family building benefits include fertility coverage and adoption/surrogacy assistance.
- 401K match up to 6%, plus an additional 2% core contribution = up to 8% company contribution.
- Paid time off includes 15 vacation days, 9 paid holidays, 3 floating holidays, sick leave, and additional options to support volunteer and parental leave.
- Educational and training opportunities through company programs along with tuition assistance and student debt support.
Disclaimer: Benefit offerings may vary depending on Collective Bargaining Agreements and local/state regulations.
Safety Sensitive Role:No
The company designates certain roles as Safety Sensitive. Safety Sensitive roles may require that you pass additional drug screening.