Lead Security Incident Response Analyst - ADT

Company Overview:

ADT has been in the business of helping save lives since 1874. As the #1 smart home security provider in the U.S., we help protect and connect families, businesses and larger commercial customer every day. Our continuous innovation, advanced technology and strategic partnerships deliver products and services that help protect life and valuables, whether at home, your business or on the go. And as times change, so do we.Above all, our mission is clear: we help save lives for a living. Looking for a career where you can make a real impact? Join our team today and put purpose behind your paycheck. #WeAreADT ​

Check out more about life at ADT here.

Responsibilities:

• Serve as the Subject Matter Expert of Tier 3 Security Incident Alerts.
• Serve as Escalation contact from Tier 1 and Tier 2 analysts with MDR third party vendor.
• Serve as Lead Incident Responder, including potential after hour engagements.
• Creation of Alerting dashboards and reports for both technical and non-technical leaders.
• Tune, Optimize Security Tooling configurations as needed for End Point Security, DLP prevention Policies, etc.
• Creation of threat detection rules using data from firewalls, IDS, Antivirus/EDR, DLP, WAF, Netflow, Vulnerability Management, System Event Logging, Cloud Security Platforms.
• Creation of technical documentation detailing playbooks, workflows, queries and more.
• Provide solutions to improve secure configuration and hardening of End Point Security, Network Security, Email Security, etc.
• Perform technical analysis of malware and network/web application attacks and other suspicious activities.
• Use the Incident Response Lifecycle to guide your work tasks and implement processes and procedures.
• Research latest threats and attack tactics - implement defensive measures and response procedures to reduce potential impact.

Education and Experience:

• Certified Information Systems Security Professional (CISSP) or Equivalent preferred.
• SANS and/or Advanced GIAC certifications desired.
• Bachelor’s degree in Computer Science or a related technology field or equivalent in comparable work experience within the network or security field preferred.

Skills and Knowledge:

• Excellent communication and writing skills.
• Strong analytical skills.
• Ability to solve unique problems with outside-the-box solutions.6Open-minded, adaptable, and passionate about learning.
• Highly motivated and able to work independently and as part of a high performing team.
• Broad knowledge of Enterprise Infrastructure concepts and best practices as they relate to Cyber Security and incident response.
• Solid understanding of packets, network traffic, and the OSI model.
• Knowledge of penetration testing methods and tools.
• Python knowledge is a strong plus.
• MITRE Framework is a strong plus.

Compensation & Benefits:

The salary range for this role is $60,888 – $121,776 and is based on experience and qualifications.

Certain roles are eligible for annual bonus and may include equity. These awards are allocated based on company and individual performance.

We offer employees access to healthcare benefits, a 401(k) plan and company match, short-term and long-term disability coverage, life insurance, wellbeing benefits and paid time off among others. Employees accrue up to 120 hours in their first year. Your accrual rate increases after your first year. We also offer 6 paid holidays.

Anticipated application end date will be on 7/21/2024.