Information Security Sr Analyst-Incident Response

As an Information Security Sr. Analyst - Incident Response at BVH, Inc., you will be responsible for developing and executing standards, procedures, and processes to uncover, resist, and recover from security incidents. This role offers a technically challenging career track in cyber security where your technical acumen, passion, and determination will be highlighted in the interview process. **Key Responsibilities:** - Respond to computer security incidents according to the computer security incident response policy and procedures - Provide technical guidance to first responders for handling cybersecurity incidents - Communicate investigation findings to relevant business units to help improve the cybersecurity posture - Validate and maintain incident response plans and processes to address potential threats - Compile and analyze data for management reporting and metrics - Analyze potential impact of new threats and communicate risks back to detection engineering functions - Perform root-cause analysis to document findings and participate in root-cause elimination activities as required - Triage and assess the risk of incidents, performing real-time analysis and managing workload during investigations/incidents - Create runbooks for frequently occurring incidents to automate or assist with the resolution of those cases **Preferred Qualifications:** - Ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily understood, authoritative, and actionable manner - Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one - Ability to effectively influence others to modify their opinions, plans, or behaviors - A team-focused mentality, with the proven ability to work effectively with diverse stakeholders - Strong problem-solving and troubleshooting skills **Minimum Qualifications:** - 5+ years of experience in incident response - BS or MA in computer science, information security, or a related field - Familiarity with incident response frameworks and methodologies, including frameworks like NIST 800-61 and MITRE ATT&CK - Experience with incident response tools and technologies, including tools for security information and event management (SIEM), forensics, and/or threat intelligence even in a lab environment is beneficial - Experience with reporting and communicating incident details, improving incident response processes, and recovering from security incidents is beneficial All applicants must be able to complete pre-employment onboarding requirements (if selected) which may include any/all of the following: criminal/civil background check, drug screen, and motor vehicle records search, in compliance with any applicable laws and regulations. BVH, Inc., its subsidiaries, and its affiliated companies, comply with all Equal Employment Opportunity (EEO) affirmative action laws and regulations. By valuing diverse voices and perspectives, we cultivate an authentically inclusive environment for professionals and provide innovative and effective solutions for clients. As an Information Security Sr. Analyst - Incident Response at BVH, Inc., you will be responsible for developing and executing standards, procedures, and processes to uncover, resist, and recover from security incidents. This role offers a technically challenging career track in cyber security where your technical acumen, passion, and determination will be highlighted in the interview process. **Key Responsibilities:** - Respond to computer security incidents according to the computer security incident response policy and procedures - Provide technical guidance to first responders for handling cybersecurity incidents - Communicate investigation findings to relevant business units to help improve the cybersecurity posture - Validate and maintain incident response plans and processes to address potential threats - Compile and analyze data for management reporting and metrics - Analyze potential impact of new threats and communicate risks back to detection engineering functions - Perform root-cause analysis to document findings and participate in root-cause elimination activities as required - Triage and assess the risk of incidents, performing real-time analysis and managing workload during investigations/incidents - Create runbooks for frequently occurring incidents to automate or assist with the resolution of those cases **Preferred Qualifications:** - Ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily understood, authoritative, and actionable manner - Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one - Ability to effectively influence others to modify their opinions, plans, or behaviors - A team-focused mentality, with the proven abili