Mandatory skills -

***Information Protection and Risk Management (IPRM)

** Cyber Threat Response (CTR)

**SOC

**Splunk.

**(MITRE ATT&CK)

**Firewall, proxy, SIEM, and SOAR

* *Security or CYSA certification preferred

Position Description

The Cybersecurity Response Engineer position is a valued member of the Information Protection and Risk Management (IPRM) department. The Cybersecurity Response Engineer will be a part of the Cyber Threat Response (CTR) team and will primarily serve the Security Operations Center (SOC) and Cyber Security Incident Response Teams (CSIRT) by developing and maintaining alert use cases, onboarding new security tools, facilitating access and training, and managing overall risk. To do so, they will also work closely with the Cyber Analytics and Data Science (CADS) team, as well as various Cyber Security Technology (CST) engineering teams throughout IPRM.

• Security or CYSA certification preferred
• Working knowledge of the incident response lifecycle and MITRE ATT&CK Framework
• Familiar with various security platforms and tools, such as firewall, proxy, SIEM, and SOAR
• Experienced with use case development lifecycle and risk based alerting mechanisms