THE OPPORTUNITY:

We are growing and looking to hire a highly motivated Incident Security Analyst to our security team who will lead security analysis, incident responder and threat hunting. You will be working with EDR, MDR, network security tools, SIEM, phishing simulations, email security, application security and help in compliance related tasks. We are looking for someone with a background in cloud environment who can help in improving security in AWS. This role will report directly to Senior Security Engineer II.

REQUIREMENTS:

• Bachelor’s Degree or 4+ years of additional experience in a cyber role in lieu of a degree.
• 3+ years of experience with EDR platforms such as Crowdstrike.
• 3+ years of experience in a security operations, incident response, or threat detection role.
• Experience with SIEM tools (e.g., Splunk, Sentinel, etc.) including writing detection rules and queries.
• Strong understanding of cyber threat landscapes, attack vectors, and mitigation techniques.
• Experience supporting, troubleshooting, and administering a variety of networks, OSs, and applications.
• Familiarity with frameworks such as NIST, SOC 2, ISO 27001, or CIS.
• Familiarity with security frameworks and standards (e.g., NIST CSF, MITRE ATT&CK, CIS Controls).
• Availability for on-call support as needed for security incidents
• Excellent communication and collaboration skills.

• A successful candidate will thrive in a dynamic setting, leveraging their expertise in malicious attacks to identify and respond to cybersecurity incidents as a subject matter expert.
• Monitor, triage and take part in incidence response related to any suspicious activity.
• Analyze system logs and alerts to detect and respond to threats in a SIEM. Create custom detections for LG Ads within the SIEM platform.
• Collaborate on compliance and privacy tasks to facilitate responding to RFIs, RFPs and other audits.
• Help in getting and maintaining security certifications such as SOC2. Implement NIST guidelines within LG Ads infrastructure.
• Stay up-to-date on changes to relevant cybersecurity regulations and standards, and communicate those changes to stakeholders.
• Contribute to the development of metrics and reporting mechanisms to track supply chain cybersecurity performance.