City

The Email Security Analyst is responsible for providing support to email security and brand protection functions, projects, and programs. The Analyst will provide operational support, intelligence gathering, analysis and report development, publishing, and briefing. Besides managing aspects of the day-to-day function of these programs, he or she will partner with various cyber and information security teams to enhance current solutions and find new solutions to stay ahead of the ever-changing cyber threat. The position will require substantial collaboration with other members of the team and across other Cyber Security Operations teams ensuring appropriate email security support and solutions are triaged appropriately.#CISOResponsibilities:<ul><li>Actively monitor and research cyber threats with a direct or indirect impact to the Citi brand.</li><li>Analyze and provide oversight of analysis of email threats and controls.</li><li>Develop and manage processes to track identified incidents to resolution.</li><li>Develop metrics and reports as needed.</li><li>Triage information received from vendors and process that information through previously defined internal workflows.</li><li>Manage meetings with internal stakeholders to address open issues and identify process improvements.</li><li>Actively engage in liaison activities with intelligence communities, industry associations, peer institutions, and information sharing communities.</li><li>Apply developed communication and diplomacy skills to guide and influence decision makers.</li></ul>Qualifications:<ul><li>Technical and analytical expertise and experience (preferred 2+ years’ Information Technology/ Cybersecurity experience).</li><li>Understanding of and demonstrated experience with the tools and sources available to conduct email and threat analysis.</li><li>Cross-functional understanding of email operations, security practices and the user experience.</li><li>Ability to organize and appropriately prioritize multiple, ongoing tasks via efficient time management and forecasting. Project management skills a plus.</li><li>Ability to work independently, as well as in team situations, to help internal and external customers achieve desired results.</li><li>Strong written and verbal communication and presentation skills.</li></ul>Education:<ul><li>Bachelor’s degree/University degree or equivalent work experience;</li><li>IS Certifications are desired, though optional (CISSP, GSEC, GCFA, GREM, Security+, CISA, CISM). </li></ul>Benefits:<ul><li>Competitive compensation package with a wide range of benefits:<ul><li>Cafeteria Program</li><li>Home Office Allowance - for colleagues working in hybrid and remote work models</li><li>Paid Parental Leave Program - maternity leave and paternity leave</li><li>Private Medical Care Program and onsite medical rooms at our offices</li><li>Pension Plan Contribution to voluntary pension fund</li><li>Group Life Insurance</li><li>Employee Assistance Program</li></ul></li><li>Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed</li><li>Flexible work arrangements to support colleagues’ in managing work - life balance</li><li>Continuous career progression opportunities across geographies and business lines</li><li>Inclusive and friendly corporate culture</li><li>Socially active employee communities with diverse networking opportunities</li></ul>Sounds like Citi has everything you need? Apply to join the world’s most global bank and discover the true extent of your capabilities.-------------------------------------------------Job Family Group: Technology-------------------------------------------------Job Family:Information Security------------------------------------------------------Time Type:Full time------------------------------------------------------Citi is an equal opportunity and affirmative action employer.Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" rel="noopener noreferrer nofollow ugc" target="_blank">Accessibility at Citi</a>.View the "<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law</a>" poster. View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law Supplement</a>.View the <a href="http://citi.com/citi/diversity/assets/pdf/eeo_aa_policy.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO Policy Statement</a>.View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Pay Transparency Posting</a>

Budapest

Email Security Analyst (Hyrbid)

The Email Security Senior Analyst is responsible for providing expert support and leadership to email security and brand protection functions, projects, and programs. They will be responsible for interactions with vendors, employees, and stakeholders of the team’s services. The Senior Analyst will provide operational support, intelligence gathering, project and program management, analysis and report development, publishing, and briefing. Besides managing aspects of the day-to-day function of these programs, he or she will partner with various cyber and information security teams to enhance current solutions and find new solutions to stay ahead of the ever-changing cyber threat.The position will require substantial collaboration with other members of the team and across other Cyber Security Operations teams ensuring appropriate email security support and solutions are triaged appropriately.#CISOResponsibilities:<ul><li>Provide expertise and experience to existing and future functions and projects focused on email threats and controls.</li><li>Actively monitor and research cyber threats with a direct or indirect impact to the Citi brand</li><li>Analyze and provide oversight of analysis of email threats and controls.</li><li>Provide leadership, solution design, and hands-on development support for email security controls.</li><li>Develop and manage processes to track identified incidents to resolution.</li><li>Develop weekly, monthly, quarterly, and annual metrics and reports as needed.</li><li>Develop written analytical reports and give presentations on findings.</li><li>Triage information received from vendors and process that information through previously defined internal workflows.</li></ul>Qualifications:<ul><li>Highly technical and analytical expertise, with a proven deep background (preferred 5+ years’ IT experience in addition to cybersecurity) in technology design, implementation, and delivery.</li><li>Minimum 3+ years working in security engineering or security operations role, with a focus on email security.</li><li>Strong understanding of and demonstrated experience with the tools and sources available to conduct email and threat analysis.</li><li>Experience with enterprise phishing defense concepts and technologies.</li><li>Cross-functional understanding of email operations, security practices and the user experience</li><li>Ability to identify and develop new processes to address cross-functional and cross-business requirements and implement.</li><li>Ability to manage projects and ensure tasks are being met timely. Work with leaders of Cyber Security Operations teams to track, drive and report on strategic initiatives.</li><li>Ability to organize and appropriately prioritize multiple, ongoing tasks via efficient time management and forecasting. Project management skills a plus.</li></ul>Education:<ul><li>Bachelor’s degree or equivalent work experience;</li><li>IS Certifications are desired (CISSP, GSEC, GCFA, GREM, Security+, CISA, CISM). </li><li>Email vendor certifications a plus.</li></ul>Benefits:<ul><li>Competitive compensation package with a wide range of benefits:<ul><li>Cafeteria Program</li><li>Home Office Allowance - for colleagues working in hybrid and remote work models</li><li>Paid Parental Leave Program - maternity leave and paternity leave</li><li>Private Medical Care Program and onsite medical rooms at our offices</li><li>Pension Plan Contribution to voluntary pension fund</li><li>Group Life Insurance</li><li>Employee Assistance Program</li></ul></li><li>Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed</li><li>Flexible work arrangements to support colleagues’ in managing work - life balance</li><li>Continuous career progression opportunities across geographies and business lines</li><li>Inclusive and friendly corporate culture</li><li>Socially active employee communities with diverse networking opportunities</li></ul>Sounds like Citi has everything you need? Apply to join the world’s most global bank and discover the true extent of your capabilities.-------------------------------------------------Job Family Group: Technology-------------------------------------------------Job Family:Information Security------------------------------------------------------Time Type:Full time------------------------------------------------------Citi is an equal opportunity and affirmative action employer.Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" rel="noopener noreferrer nofollow ugc" target="_blank">Accessibility at Citi</a>.View the "<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law</a>" poster. View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law Supplement</a>.View the <a href="http://citi.com/citi/diversity/assets/pdf/eeo_aa_policy.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO Policy Statement</a>.View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Pay Transparency Posting</a>

Email Security Senior Analyst (Hybrid)

Node.Digital

Cyber Incident Manager Location: Arlington, VA- Must have an active TS/SCI clearanceNode is supporting a U.S. Government customer to provide support for onsite incident response to civilian Government agencies and critical asset owners who experience cyber-attacks, providing immediate investigation and resolution. Contract personnel performs investigations to characterize the severity of breaches, develop mitigation plans, and assist with the restoration of services. Node is seeking a Cyber Incident Manager to support this critical customer mission. Responsibilities: - Correlating incident data to identify specific trends in reported incidents - Recommending defense-in-depth principles and practices (i.e. Defense in Multiple Places, layered defenses, security robustness, etc.) - Performing Computer Network Defense incident triage to include determining scope, urgency, and potential impact - Researching and compiling known resolution steps or workarounds to enable mitigation of potential Computer Network Defense incidents within the enterprise - Applying cybersecurity concepts to the detection and defense of intrusions into small, and large-scale IT networks, and conducting cursory analysis of log data - Monitoring external data sources to maintain the currency of Computer Network Defense threat conditions and determine which security issues may have an impact on the enterprise - Identifying the cause of an incident and recognizing the key elements to ask external entities when learning the background and potential infection vector of an incident, - Receiving and analyzing network alerts from various sources within the enterprise and determining possible causes of such alerts - Tracking and documenting Computer Network Defense (CND) incidents from initial detection through final resolution, and working with other components within the organization to obtain and coordinate information pertaining to ongoing incidents - Providing support during assigned shifts (Monday through Friday, normal business hours) RequirementsRequired Skills: - U.S. Citizenship - Must have an active TS/SCI clearance - Must be able to obtain DHS Suitability - 5+ years of directly relevant experience in cyber incident management or cybersecurity operations - Knowledge of incident response and handling methodologies - Having close familiarity with NIST 800-62 (latest revision), and FISMA standards as they pertain to reporting incidents. - Knowledge of the NCCIC National Cyber Incident Scoring System to be able to prioritize triaging of incident - Knowledge of general attack stages (e.g., footprinting and scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks, etc.) - Skill in recognizing and categorizing types of vulnerabilities and associated attacks - Knowledge of basic system administration and operating system hardening techniques, Computer Network Defense policies, procedures, and regulations - Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non nation-state sponsored], and third generation [nation-state sponsored]) - Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return-oriented attacks, and malicious code) Desired Skills: - Knowledge of different operational threat environments (e.g., first-generation [script kiddies], second generation [non nation-state sponsored], and third-generation [nation-state sponsored]) - Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return- oriented attacks, and malicious code) Required Education: BS Incident Management, Operations Management, Cybersecurity or related degree. HS Diploma with 7-9 incident management or cyber security experience Desired Certifications: GCIH, GCFA GISP, GCED, CCFP or CISSPCompany Overview:Node.Digital is an independent Digital Automation &amp; Cognitive Engineering company that integrates best-of-breed technologies to accelerate business impact.Our Core Values help us in our mission. They include:OUR CORE VALUES**Identifying the~RIGHT PEOPLE~and developing them to their full capabilities****Our customer’s “Mission” is our “Mission”. Our~MISSION FIRST~approach is designed to keep our customers fully engaged while becoming their trusted partner****We believe in~SIMPLIFYING~complex problems with a relentless focus on agile delivery excellence****Our mantra is “~Simple*Secure*Speed~” in the delivery of innovative services and solutions**Benefits<ul> <li>Medical (90% Coverage for Employee)</li> <li>Dental</li> <li>Vision</li> <li>Basic Life (100% Coverage for Employee)</li> <li>Long Term Disability (100% Coverage for Employee)</li> <li>Health Saving Account</li> <li>401K</li> <li>Three weeks of PTO</li> <li>10 Paid Holidays</li> <li>Pre-Approved Online Training</li> </ul>

Arlington

Cyber Incident Manager

Cloudflare, Inc.

About Us
At Cloudflare, we have our eyes set on an ambitious goal: to help build a better Internet. Today the company runs one of the world’s largest networks that powers approximately 25 million Internet properties, for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. 
We realize people do not fit into neat boxes. We are looking for curious and empathetic individuals who are committed to developing themselves and learning new skills, and we are ready to help you do that. We cannot complete our mission without building a diverse and inclusive team. We hire the best people based on an evaluation of their potential and support them throughout their time at Cloudflare. Come join us! 
Responsibilities 
<ul>
<li>Can clearly communicate the Incident Response Lifecycle and the Kill Chain (Attack) Life Cycle to internal and external stakeholders</li>
<li>Serve as point of contact throughout the incident lifecycle, interacting directly with executives, and legal. </li>
<li>Extend Security Incident Response framework, capabilities responsibilities</li>
<li>Assist in broadening Security Incident Response scope into Product Security, Legal and Insider Threat.</li>
<li>Effectively communicate investigative findings and impact to wide array of stakeholders including executive leadership</li>
<li>Partner with the team members across two regions to drive response and investigations globally.</li>
<li>Produce concise yet detailed case reports for internal and external partners.</li>
<li>Assist in planning and strategizing program initiatives and milestones to mature incident response capabilities </li>
<li>Participate in the creation, and maintenance Incident Response Standards, Policies, Procedures, Guidelines, and Checklists</li>
<li>Empathize, reassure, and respond to sensitive incidents with compassion, professionalism, and clarity  </li>
<li>Train less experienced members of the team on best practices, processes, and technologies</li>
</ul>

Requirements
<ul>
<li>5+ years of demonstrated experience in digital forensics incident response investigations, litigation support investigations, security engineering, log aggregation, and/or penetration testing</li>
<li>Minimum of 2 years leading incident response engagements or efforts in enterprise and production environments</li>
<li>Broad understanding of data loss prevention and insider threat prevention concepts, technical expertise, and analytical capabilities to detect patterns and anomalies across data sets of technical and non-technical indicators.</li>
<li>Litigation discovery experience, including data preservation, collection, scoping and review of data from a broad array of repositories and systems, including proprietary systems</li>
<li>Deep knowledge of malicious insider threat indicators, such as those associated with fraud, theft of intellectual property, sabotage, and espionage.</li>
<li>Solid understanding of network and system intrusion and detection methods; examples of related technologies include, Splunk, Kibana, Timesketch, GRR Rapid Response, Velociraptor, OSQuery, Next Generation Endpoint Protection Platforms (EPP), Security information and event management (SIEM),  hacking tools techniques and procedures</li>
<li>Experience with coding and analytics, malware analysis, endpoint lateral movement detection methodologies and host forensic tools</li>
<li>Understanding of network protocol analysis, public key infrastructure, SSL, Microsoft Windows, MacOS, Linux, open-source software, scripting, SQL and software programming</li>
<li>Strong troubleshooting, organizational skills, and capacity to work on multiple activities simultaneously</li>
<li>Great verbal/written communication, problem solving, analytical and independent judgment skills to support an environment driven by teamwork; must be able to positively influence, mentor and be a credible source of knowledge to less experienced team members</li>
</ul>
Preferred Qualifications
<ul>
<li>Forensic tool development and automation </li>
<li>Malware Reverse Engineering</li>
<li>SALT, Ansible, Puppet, Chef, and/or Terraform experience.</li>
<li>Experience with industry security baselines such as CIS and NIST 800-53+</li>
<li>Python, SQL, GoLang</li>
<li>GCFA, GCFR, GNFA Certifications</li>
</ul>What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
Project Galileo: We equip politically and artistically important organizations and journalists with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
Athenian Project: We created Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration.
Path Forward Partnership: Since 2016, we have partnered with Path Forward, a nonprofit organization, to create 16-week positions for mid-career professionals who want to get back to the workplace after taking time off to care for a child, parent, or loved one.
1.1.1.1: We released 1.1.1.1 to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our privacy commitment and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer.  We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness.  All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law. We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities.  Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.  If you require a reasonable accommodation to apply for a job, please contact us via e-mail at hr@cloudflare.com or via mail at 101 Townsend St. San Francisco, CA 94107.

Amsterdam

Senior Incident Response Engineer EMEA

Amazon.com

Job summaryAmazon is seeking Security Engineers to join our Detection and Monitoring team in the Amazon Security Operations Center. Join the team responsible for creating and curating detectors for threats relevant to all Amazon businesses. The Detection and Monitoring team works within the Amazon Security Operations Center to build and maintain mechanisms to detect attacker tactics, techniques and procedures, and to investigate alerts. You will use internal and external threat intelligence, your experience hunting threat actors, or your experience performing red team operations to identify emerging threats to Amazon and create innovative detection techniques using network, system and application logs generated from across a large, heterogeneous network. You will develop automated enrichments to improve the quality and context of alerts, and automated mitigations to minimize the containment time for security incidents.With your technical expertise, you will be solving security challenges at scale, working to protect the applications powering the most sophisticated e-commerce platform ever built. Responsibilities:<ul><li>Operate as part of the Security Operations Center to detect and investigate advanced threats on Amazon’s networks</li><li>Build innovative new ways to detect potential threats on Amazon's networks</li><li>Build systems to enrich alerts, and automate remediation and response actions</li><li>Work with teams across Amazon to identify and build threat detections supporting InfoSec's customers</li><li>Provide support during security incidents</li></ul>Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.<h3>Basic Qualifications· BA/BS in a related discipline, or equivalent experience· 3+ years of information security experience, preferably in intrusion detection and response, threat hunting, or red/purple teams· Advanced knowledge of network, system, and web application attacks and mitigations.· Deep understanding of adversary techniques and the signals they generate· Expertise in tools and techniques for analyzing large sets of data· Strong verbal and written communication skills· Experience developing software automation solutions· Proficiency in one or more high-level coding or scripting language<h3>Preferred Qualifications</h3>· Relevant industry certifications which demonstrate intimate familiarity with the cyber-attack lifecycle. (e.g. GMON, GDAT, GCIH, GCFA, GREM, OSCP)· 3+ years’ experience creating, analyzing and responding to security alerts from large scale, complex networks· Experience leveraging data science/machine learning techniques to detect anomalous security events· Experience with Amazon Web ServicesAmazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.

Austin

Security Engineer, Threat Detection

Apply to GIAC Certified Forensic Analyst Cyber Security Jobs in companies remotely and near you. New GIAC Certified Forensic Analyst Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Email Security Analyst (Hyrbid) at City	Remote Full Time CISM CISO Analyst
Email Security Senior Analyst (Hybrid) at City	Remote Full Time CISM CISO Analyst
Cyber Incident Manager at Node.Digital	Full Time Manager Incident Response Contract GCFA
Senior Incident Response Engineer EMEA at Cloudflare, Inc.	Full Time Forensic Incident Response GCFA Windows
Security Engineer, Threat Detection at Amazon.com	Full Time Red Team GCFA

GIAC Certified Forensic Analyst Cyber Security Jobs

0 GIAC Certified Forensic Analyst Cyber Security Jobs. Page 1 of 1

5 closed giac certified forensic analyst cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

GCFA Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category