• Continuously monitor for and respond to potential and active cybersecurity incidents in order to mitigate immediate and potential risk to the organization.
• Identify and assesses the capabilities and activities of external threat actor groups and advise appropriate parties on required mitigation steps.
• Collect, process, preserve, analyze, and present computer-related evidence in support of network vulnerability mitigation and/or criminal, fraud, counterintelligence, or law enforcement investigations.
• Perform cyber incident triage, to include determining scope, urgency, and potential impact,
• Assist in developing and managing various information security policies, SOPs, and other program-specific documentation.
• Provide 24 x 7 support on a rotating schedule for various enterprise security systems and operations (depending on role).
• Make recommendations regarding the selection of efficient security controls to mitigate risk (e.g., protection of information, systems and processes).

• Experienced with cyber response processes and procedures including digital evidence collection, log analysis and packet capture/analysis.
• Experienced in malware analysis and reverse engineering
• Familiar with the use of some common Incident Response and Forensics Tools (SIFT, Encas, FTK, Redline, Volatility, etc.). Experience with threat intel tools like Maltego or Shodan.
• Familiar with the tools included in a modern security stack (firewalls, HIPS/HIDS, Next-Gen AV, SIEM, SOAR, etc.)
• Experience with using open and closed source threat intel tools and sources to stay up to date on the latest industry trends, vulnerabilities, attackers, and techniques.
• Familiar with at least one scripting or other automation language (Python, Perl, Batch, etc.)
• Capable of analyzing and summarizing the impact of various cyber threats to internal and external parties of varying technical skill level.

• 3-7 years experience in a Cyber Incident Response role (including internships)
• Certifications such as GCIH, GCFE, GCFA, GNFA, GREM, or ECIH are a plus.
• Bachelors degree in a technical field (Computer Science, IT, IS, Engineering, etc.). Experience in lieu of degree

#LI-POST

Benefits

Competitive compensation packages | Sick Time | Generous Vacation + 12 holidays to recharge & refuel | Internal Career Mobility & Performance Consulting | Medical, Dental, Vision, FSA & Dependent Care | 403b retirement savings plan match | Tuition Reimbursement | Parental Leave & Adoption Assistance | Commuter Spending Account | Fitness Discounts & Wellness Program | Resource Networks | Life Insurance & Disability | Remote Flexibility

We believe in communication, transparency, and thinking beyond your 8-hour day @ MSK. Its important to us that you have a sense of impact, community, and work/life balance to be and feel your best.

Our Hiring Process

You read the ad, agree it sounds like a great fit & apply -> Talent Acquisition contacts you to schedule a phone interview (if your profile aligns)-> after speaking with the Talent Acquisition Specialist, you will connect with the Hiring Manager by phone or video call -> if your experience is a fit, you will move forward to an on-site visit or video call with the team -> post interview feedback -> ideally an offer! -> reference check & onboarding -> orientation & official welcome to MSK

#LI-POST

MSK has been named a Best Place to Work in IT by Insider Pro & Computerworld, for the 2nd year in a row.

We look forward to meeting soon!