Job Description The Senior Associate, Information Security is part of a global team and is responsible for incident response of cyber security incidents that are associated with our businesses, clients, and vendors; is technically skilled and ensures incident containment, remediation, and closure. This individual will be expected to work closely with the legal, data privacy, business, and client teams. They should be comfortable with interacting with senior executives, including C-level staff. Responsibilities Incident Commander to lead investigation and response of cyber security incidents. Analyze compromised/potentially compromised systems. Coordinate evidence/data gathering and document security incident reports. Manage, review, and present written and oral reports in a pertinent, concise, and accurate manner for distribution to management. Maintain current knowledge of tools and best practices in advanced persistent threats, tools, techniques, procedures of attackers, forensics, and incident response. Perform complex forensic investigations into system breaches, data leaks, and system weaknesses. Provide technical expertise to staff on security incident monitoring, triage, response, threat & vulnerability management, and security analysis. Provide strategic direction on types of Incident Management activities that will drive efficiencies across company, including automation with AI tools. Qualifications EDR Experience- CrowdStrike and/or SentinelOne with experience investigating and analyzing malware and other malicious activity. 4 or more years of experience in an analytical role of either forensics analyst (Linux, Windows, or MacOS), threat analyst, incident response, SOC analyst, or security engineer/ consultant. Experience with cloud environments such as: Azure, AWS, GCP – knowing how to collect and analyze logs from Guard Duty/ Defender and CloudTrail, etc. Experience with system and application log and artifact collection and analysis (Windows, Linux, Mac, etc.). Familiarity with the MITRE ATT&CK or related frameworks. Experience developing and managing incident response programs with focus on efficiency through AI development. Strong communication skills with confidence leading Incident Response calls with different stakeholders; followed by producing detailed incident reports. Proficient in social engineering, phishing, and related fraud schemes. Strong general knowledge of security concepts and expertise in network and web application security issues. Experience with a scripting language such as Python, Bash, PowerShell, or other scripting language in an incident handling environment. Work Schedule Core work hours are Monday through Friday, 9:00 AM-5:00 PM. Must also be flexible and be available to work non-standard business hours upon request or as needed Must be available via cell phone for VIP support Travel Local travel between sites may be required Occasional travel to sites outside the local area may be required Salary Range Salary RangeTransparency matters to us. The salary range for this position is $100,000-$120,000 per year. Actual compensation within this range will be based on a variety of factors, including relevant experience, knowledge, skills, and applicable certifications. This range reflects what we reasonably expect to offer based on current market data. Re:Sources USA is an Equal Opportunity / Affinitive Action employer. All qualified applicants to Re:Sources USA will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or protected veteran status. #J-18808-Ljbffr
Senior Associate, Information Security
UNAVAILABLE
toronto, toronto
Published 18 days ago
Report job