The Opportunity
The Digital Forensics & Incident Response (DFIR) team is part of our Security Operations Center (SOC) - MassMutual’s internal security monitoring, detection and response organization tasked with the detection and response to threats on the firm's network.
We are looking for a strong cyber security professional to add to a highly technical security team - someone with a combination of experience and education in cyber incident response, threat detection and response, digital forensics, and red team blue team support.
The Team
As a member of the DFIR team, you will work in close collaboration with fellow security analysts, engineers, and other IT security specialists throughout the firm including the Security Operations Center, Threat Intelligence, Offensive Security, Security Platforms Support, Network Security Engineering, Endpoint Security and IAM teams
The Impact :
Typical responsibilities include :
- Investigate various types of cyber security incidents
- Conduct detailed endpoint and network forensic data analysis as part of an investigation
- Develop new detection capabilities to identify malicious activity
- Take on specialized projects to enhance our capabilities and security toolsets
- Perform in depth malware analysis
- Mentor junior security analysts and help them to acquire new security skills
The Minimum Qualifications
Bachelor's degree8+ years experience in Cyber Security Incident Response or related fieldAbility to work M-F 3pm-11 : 30pm Eastern Time scheduleThe Ideal Qualifications
The ideal candidate will have a well-rounded understanding of endpoint, network and cloud defenses and detection methodologies, forensics, and incident response. They will also have some offensive security experience to allow the ability to think like an adversary. Successful candidates will have experience in one or more of the following areas :
Incident handling, to include experience conducting or managing incident response from small scale to large event coordination in a complex enterprise environmentEndpoint & network forensic analysis, to include analysis of relevant logs and data, and background using a variety of forensic analysis toolsOffensive security, with the ability to think like an adversary when threat hunting and responding to incidentsThreat detection and response, to include the ability to identify gaps in alerting and development of new alert logicKnowledge of current security threats, techniques, and landscapeAbility to take a security event, perform analysis to help understand the context and piece together the overall narrative of a potential compromise.Experience with system administration in a large enterprise environment, including Windows, macOS and Linux servers and workstations, network administration, cloud administrationGCIH, GCFA, GCFE, GREM SANS Certifications helpfulExperience with penetration testing labs (such as Hack the Box, or Capture the Flag challenges)Ability to perform static and dynamic malware analysis to understand the nature of malwareBA or BS Computer Science, or a college degree in Cyber Security related fieldpassion to learn, as well as a dedication and self-driven desire to keep abreast of latest cybersecurity threats and hacking techniquesadvanced problem-solving skills, and the desire to get your hands dirtystrong verbal, written, and interpersonal communication skillsstrong project management skillsWhat to Expect as Part of MassMutual and the Team
regular collaboration with the Security Operations Centerfocused one-on-one time with your manageraccess to learning content on Immersive, InfoSkills and SANS as well as other informational platformsyour ethics and integrity will be valued by a company with a strong and stable ethical business with industry leading pay and benefits#LI-RK1
Salary Range :
$134,400.00-$176,400.00
At MassMutual, we focus on ensuring fair equitable pay, by providing competitive salaries, along with incentive and bonus opportunities for all employees. Your total compensation package includes either a bonus target or in a sales-focused role a Variable Incentive Compensation component.