FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Staff IT Security Analyst – Incident Response
WGU Advancement. Lead complex incident response and investigation efforts, including technical analysis, evidence and data collection, forensic support, containment, remediation, and identifying opportunities to strengthen defenses .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in incident response, cloud threat analytics, and security automation, with a strong focus on implementing the MITRE ATT&CK Framework and maintaining cloud resources. Proficient in scripting, security tools, and compliance regulations, ensuring robust security measures across diverse environments.
Highest-signal resume keywords
Incident Response LeadershipMITRE ATT&CK Framework ImplementationCloud Security AutomationScripting with Bash and PythonSecurity Tool Integration
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Incident ResponseCloud Threat AnalyticsSecurity AutomationScripting LanguagesInfrastructure-as-CodeSIEM Content DevelopmentData AnalysisAWS ServicesSecurity Compliance ChecksForensic Analysis
Soft Skills
Analytical SkillsProblem-SolvingDecision-MakingCommunication SkillsMentoring
Tools & Technologies
AWSServiceNowKaliNessusBurpMetasploitCloudFormationCI/CD PipelinesDLPEncryption
Certifications & Qualifications
CISSPGIACISACACEH
Industry Keywords
Information SecurityData SecurityGDPRCCPACloud ArchitectureSecurity RegulationsThreat DetectionCompliance EnforcementRisk AnalysisSecurity Policies
Tech Stack
Tools & technologiesAWSCloudDynamoDBEC2PythonServiceNow
About the role
Key responsibilities & impact- Lead complex incident response and investigation efforts, including technical analysis, evidence and data collection, forensic support, containment, remediation, and identifying opportunities to strengthen defenses
- Lead security content and detection use-case development aligned to the MITRE ATT&CK Framework
- Research attacks, identify Indicators of Compromise, analyze large data sets, and develop detection logic for malicious, suspicious, and abnormal activity
- Architect and build cloud threat analytics using log correlation, AI, and machine learning capabilities
- Develop continuous security and compliance checks across AWS and other cloud platforms
- Design and implement SOAR and security automation for configuration management, compliance enforcement, investigation workflows, and remediation
- Build and automate security capabilities across cloud infrastructure, CI/CD pipelines, infrastructure-as-code, data security, DLP, encryption, and security tooling
- Identify security model gaps and lead technical solutions from requirements and architecture through implementation, integration, and ongoing operation
- Integrate security solutions with ServiceNow
- Act as a technical lead and mentor for other analysts
- Research emerging threats and techniques, develop team capabilities, and provide hands-on guidance during demanding security situations
Requirements
What you’ll need- Bachelor's Degree in IT Security, Computer Science, Engineering, or related field
- 7 years of Information Security experience, including understanding of all security domains
- Hands-on experience implementing MITRE ATT&CK Framework
- Working experience creating, designing, and implementing SIEM content security rules
- Hands-on experience maintaining cloud resources using infrastructure-as-code, such as CloudFormation and CDK
- Expert scripting language experience, such as Bash and Python, with strong working knowledge of automation
- Experience with open-source security tools, including Kali, Nessus, Fortify, AppScan, Nexpose, SAINT, Burp, NMap, Metasploit, Meterpreter, Wireshark, Kismet, Aircrack-ng, and Eramba
- Hands-on experience with AWS APIs, Lambda, DynamoDB, EC2, VPC, CloudFront, CloudTrail, CloudWatch, and IAM
- Relevant security certifications, such as CISSP, GIAC, ISACA, and CEH
- Knowledge and experience with cloud and data security, including advanced understanding of AWS compute, network, storage, database, and identity services
- Hands-on experience integrating security into CI/CD pipeline stages
- Expertise in SaaS, PaaS, enterprise cloud architecture, and mixed-technology security solutions
- Ability to lead in a fast-paced, multidisciplinary environment using a methodical, data-driven approach to security and risk analysis
- Excellent analytical, problem-solving, decision-making, and communication skills
- Understanding of information security regulations, policies, and privacy requirements, including GDPR and CCPA
- Equivalent relevant experience performing the essential functions may substitute for education degree requirements
- No visa sponsorship is available for this role
Benefits
Comp & perks- Eligible for bonuses
- Medical, dental, vision, telehealth and mental healthcare
- Health savings account and flexible spending account
- Basic and voluntary life insurance
- Disability coverage
- Accident, critical illness and hospital indemnity supplemental coverages
- Legal and identity theft coverage
- Retirement savings plan
- Wellbeing program
- Discounted WGU tuition
- Flexible paid time off with no accrual requirement
- Flexible paid sick time with no accrual requirement
- 11 paid holidays
- Other paid leaves, including up to 12 weeks of parental leave
- Occasional travel, including designated company summits, conferences, company locations, and business-related events