Senior Incident Response Analyst

FLSA: ExemptGrade - 07

Salary Details: Minimum Salary - 108147.000 Mid Range Salary - 136809.000 Maximum Salary - 165471.000 Benefits - Rutgers provides a comprehensive benefits package to eligible employees. The specific benefits vary based on the position and may include: Medical, prescription drug, and dental coverage Paid vacation, holidays, and various leave programs Competitive retirement benefits, including defined contribution plans and voluntary tax-deferred savings options Employee and dependent educational benefits (when applicable) Life insurance coverage Employee discount programs Position Status - Full Time Working Hours

Standard Hours: 37.50 Daily Work ShiftWork Arrangement - Consistent with the current application of Rutgers Policy 60.3.22 or the applicable provisions of relevant collective negotiations agreements, this position may be eligible for a hybrid work arrangement. Flexible work arrangements are not permanent, subject to change or discontinuation, and contingent on the employee receiving approval in the FlexWork@RU Application System.

Qualifications: Minimum Education and Experience - Bachelor's degree or equivalent education and experience plus five years relevant experience in specialty area 5+ years of information security experience; vulnerability scanning, penetration testing and/or security operations 5+ years of experience working in an enterprise technical environment, preferably in a customer-service based organization Certifications/Licenses RequiredKnowledge, Skills, and Abilities - Knowledge in a wide array of cybersecurity tools and their capabilities as they pertain to the detection and mitigation of Cyber Threats (SIEM, EDR, NGFW, DLP, IPS/IDS, etc.) Knowledge of industry standard cybersecurity frameworks (MitreATT&CK, NISTIncident Response, etc.) Understanding of complex enterprise networks to include routing, switching, firewalls and common networking protocols (HTTP, DNS, SMB, etc.) Experience with Regex and at least one common scripting language (PERL, Python, PowerShell) Experience with an enterpriseSIEMplatform Excellent verbal and written communication skills Ability to communicate technical problems succinctly and accurately Ability to handle multiple, shifting priorities and a large volume of technical problem resolution Ability to apply and document new technical knowledge and procedures Ability to work well with peers and junior staff in a team oriented, cooperative spirit

Preferred Qualifications: Degree in a related field such as Information Security. 3+ years of experience in incident response, threat hunting, SOCoperations, digital forensics, or detection engineering. Relevant certifications such asGCFA, GCIH(or otherSANScertifications), CISSP, CySa+ Experience as a key member of a cybersecurity team (SOC, Incident Response, Threat Intel, Malware Analysis, Live Forensics, IDS/IPSAnalysis) Experience investigating identity-centric attacks, cloud compromise, phishing, business email compromise, and SaaS-based incidents. Knowledge of TTPs related to cyber-crime, malware, botnets, social engineering, APTs and other threats. Experience developing, tuning, and maintaining detection content includingSIEMcorrelation rules, behavioral analytics, dashboards, and automation workflows. Expertise in network and host-based analysis and investigation Equipment Utilized - Vulnerability analysis/Penetration testing Packet capture and Netflow Firewalls/IPS/IDS/EDR Syslog/SIEM/Dashboards & Alerting/SOAR Threat hunting/Malware Analysis Windows/Linux/macOSPhysical Demands and Work Environment - Must be able to lift up to 50 pounds for the purpose of moving computer equipment.