SENIOR INCIDENT RESPONSE ANALYST

Title.
Senior Incident Response Analyst (SOC) Location.
Monterrey, N.
.
Blue Yonder is seeking a “Hands-on” Senior Incident Response Analyst (SOC) who would be responsible for threat detection, monitoring and Incident response.
Looking for suitable candidates to join SOC (Security Operations Team) Tier-x7 team as Sr.
Incident Response Security Analyst.
The candidate will be responsible for Daily SOC Operations and security incident response.
The candidate is required to work 5 days a week, which could be weekends as well.
This candidate will closely be partnering with internal security teams across the world.
Responsibilities Detect and respond to cyber security threats to ensure your organization operates securely.
Partner with the existing internal SOC team across the world and keep the CISO informed about security operations.
Act as a liaison between the SOC team, other internal stakeholders, and external parties such as vendors, clients or regulatory bodies.
Develop incident management plans and procedures, surveying the networks for signs of a breach.
Coordinating and executing tabletop exercises to practice, develop plans, policies and procedures.
Perform proactive threat hunts to identify threats and assess the state of security controls.
Work with in-house red teams in order to detect offensive operations, and capture and action findings.
Proactively look for suspicious anomalous activity based on data alerts or data outputs from various toolsets.
Drive Security Incidents end-end as Incident Responders (Asses, Triage, Communication, Remediation, Documentation) Develop new SIEM use-cases to detect un-usual activities.
Develop Incident Response Playbooks for emerging Threats/attack types.
Work on malware analysis, Phishing email analysis, and all other alerts reported.
Document the lessons learned and improve the process.
Responsible for completing the documentation of the investigation; determine the validity and priority of the activity and escalate to senior SOC analysts or leads.
Carry out Level 3 triage of incoming issues (initial assessing the priority of the event, initial determination of incident to determine risk and damage or appropriate routing of security or privacy data request) Provide communication and escalation throughout the incident per the SOC guidelines.
Identify and manage a wide range of threat intelligence sources to provide a holistic view of the threat landscape and filter out noise to focus and execute upon actionable intelligence.
Leading the development of actionable use cases to detect, triage, investigate and remediate based on latest threat actor trends, support teams with the technical implementation of parsing log sources creating, validating and testing alerting queries to reduce false positives.
Ensure that all security events and incidents (internal / external) are logged into ServiceNow and regularly updated and closed within the set SLAs Qualifications At lest 3-6 years of proven experience in Security incident response and SOC Operations Practical experience with threat detection, monitoring and incident response and implementation Ability to query and write detection rules, in Security tools, (i.
., SIEM (Qradar / Splunk), SOAR, WAF, AV, Firewalls, Internet-facing services).
Strong technical understanding of network/OS fundamentals and common Internet protocols, specifically DNS, HTTP, HTTPS Experience conducting technical analysis of security events including Malware analysis, Phishing, and digital forensics.
Strong written and oral communication skills.
Experience in investigating security issues and / or complex operational issues on Windows and Linux Knowledge of email security threats and security controls, including analyzing email headers, Web attack, network traffic analysis using tools such as Wireshark.
Experience reviewing system and application logs (e.
., web or mail server logs) Familiarity with core concepts of security incident response, e.
., the typical phases of response, vulnerabilities vs threats vs actors, Indicators of Compromise (IoCs), etc.
Certifications such as GCIH, GCIA, GSEC, CEH, Security+, SSCP.
Results focused and attention to detail.
Available to work outside of their shift when needed.
At Blue Yonder, we care about the wellbeing of our employees and those most important to them.
This is reflected in our robust benefits package and options that includes Competitive Salary Christmas Bonus (30 days) Savings Fund 15 Vacation Days on first two year and 60% Vacation bonus Major and Minor Medical Service insurance for you and your family Life Insurance Totalpass Annual bonus And more to be shared! #LI-JA1 Our Values If you want to know the heart of a company, take a look at their values.
Ours unite us.
They are what drive our success – and the success of our customers.
Does your heart beat like ours? Find out here.
Core Values Diversity, Inclusion, Value & Equality (DIVE) is our strategy for fostering an inclusive environment we can be proud of.
Check out Blue Yonder's inaugural Diversity Report which outlines our commitment to change, and our video celebrating the differences in all of us in the words of some of our associates from around the world.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.
Who are we? We are a proven, passionate bunch of disruptors.
Our work is all about tapping into your potential so we can deliver the best solutions and customer experiences on the planet.
Collaboration, respect, and a great work-life balance earned us the title of \"Best Place to Work- Employees' Choice\" by Glassdoor.
Our people are smart, creative, rock stars with over 400 patents and people years of domain expertise.
What do we do? Blue Yonder is the world leader in digital supply chain and omni-channel commerce fulfillment.
Our intelligent, end-to-end platform enables retailers, manufacturers and logistics providers to seamlessly predict, pivot and fulfill customer demand.
With Blue Yonder, you can make more automated, profitable business decisions that deliver greater growth and re-imagined customer experiences.
Blue Yonder - Fulfill your Potential.
™ blueyonder.
om “Blue Yonder” is a trademark or registered trademark of Blue Yonder, Inc.
Any trade, product or service name referenced in this document using the name “Blue Yonder” is a trademark and/or property of Blue Yonder, Inc.
Blue Yonder, Inc.
N Scottsdale Rd, Ste 400 Scottsdale, AZ