CSIRT Engineer (HYBRID)
Core
Front-line responder combating cybersecurity threats against GEICO and their customers by handling security events, conducting complex investigations, and performing remediation.
Role type
Senior Incident Response Engineer
Builds
Security event response and remediation for GEICO's cloud and on-premises environments
Domain
Cybersecurity / Incident Response
Deliverable
client delivery
Required skills
Incident response, digital forensics, cloud incident response, root cause analysis, MITRE ATT&CK framework, security control mechanisms, computer networking, threat actor TTPs, scripting (Bash, Python, Perl, PowerShell), log analysis, malware analysis, packet capture analysis
Preferred skills
Cloud security automation, reverse engineering malware, cyber threat intelligence
Technologies
AWS, Azure, GCP, Windows, Linux, Mac, NIPS, anti-malware, IDS, firewalls
Responsibilities
Identify, detect, respond, and mitigate sophisticated threats; Respond to cloud-based incidents; Perform host-based analysis of operating systems; Examine data from tools and sources to identify IOCs and malicious TTPs; Review log data to develop threat detection capabilities; Analyze events for threat mitigation
Seniority
Senior, hands-on IC