IT Security Incident Response Analyst

Alternate Locations: Work from HomeWork Arrangement:Remote : Work at home employee residing outside of a commutable distance to an office location.Relocation assistance: is not available for this opportunity.Requisition #: 73362The Role at a GlanceThis position continuously monitors the alert queue; investigates security alerts; monitors health of security sensors and endpoints; collects data and context necessary to initiate IR response. In addition, the analyst will be responsible for maintaining multiple security technologies for detecting and preventing IT security incidentsWhat you'll be doingResponsible for correlation and initial triage of security events and indicators generated by security monitoring tools to determining scope, urgency and potential impact.Document incidents from initial detection through final resolution.Perform incident response functions including but not limited to - host-based analysis functions through investigating Windows, Linux, and Mac OS X systems to identify suspicious and malicious activities.Maintain expertise in Operating Systems (Windows/Linux) operations and artifacts to assist in investigations.Ability to analyze different data types from various sources within the enterprise and draw conclusions regarding past and potential current security incidentsProvide after-hours (on-call/weekend rotational) support as required to address critical incidents and maintain continuous coverage.Perform threat hunting exercises to proactively and iteratively discover current or historical threats that evade existing security mechanisms and use that information to improve cyber resilience.Create and modify SIEM dashboards to clearly identify scope of findings or monitor activity.Tune and maintain security tool policies (EDR, IPS, Content Filter, etc.) to reduce false positives and improve tool detection capabilities.What we’re looking for3 - 5+ Years Experience with one or more of the following technologies: Endpoint Detection and Response (EDR/XDR) and/or DFIR opensource tools (Ex. Kape, Plaso Log2Timeline, Autopsy, etc.)3 - 5+ Years Information Security related experience, in areas such as: security operations, incident analysis, incident handling, and vulnerability management or testing, system patching, log analysis, intrusion detection, or firewall administration.4 Year/Bachelor's degree or equivalent work experienceApplication DeadlineApplications for this position will be accepted through Sept 30, 2024, subject to earlier closure due to applicant volume.What’s it like to work here?At Lincoln Financial Group, we love what we do. We make meaningful contributions each and every day to empower our customers to take charge of their lives. Working alongside dedicated and talented colleagues, we build fulfilling careers and stronger communities through a company that values our unique perspectives, insights and contributions and invests in programs that empower each of us to take charge of our own future.What’s in it for you:Clearly defined career tracks and job levels, along with associated behaviors for each Lincoln leadership Attribute.Leadership development and virtual training opportunitiesPTO/parental leaveCompetitive 401K and employee benefits (https://hrdirectdocs.lfg.com/misc/HR/Recruiting/BenefitsResourcesGuide.pdf)Free financial counseling, health coaching and employee assistance programTuition assistance programA leadership team that prioritizes your health and well-being; offering a remote work environment and flexible work hybrid situationsEffective productivity/technology tools and trainingThe pay range for this position is $77,101 - $143,500 with anticipated pay for new hires between the minimum and midpoint of the range and could vary above and below the listed range as permitted by applicable law. Pay is based on non-discriminatory factors including but not limited to work experience, education, location, licensure requirements, proficiency and qualifications required for the role. The base pay is just one component of Lincoln’s total rewards package for employees. In addition, the role may be eligible for the Annual Incentive Program, which is discretionary and based on the performance of the company, business unit and individual. Other rewards may include long-term incentives, sales incentives and Lincoln’s standard benefits package.About The CompanyLincoln Financial Group helps people to plan, protect and retire with confidence. As of Dec. 31, 2023, approximately 17 million customers trust our guidance and solutions across four core businesses – annuities, life insurance, group protection and retirement plan services. As of December 31, 2023, the company had $295 billion in end-of-period account balances, net of reinsurance. Headquartered in Radnor, Pa., Lincoln Financial Group is the marketing name for Lincoln National Corporation (NYSE: LNC) and its affiliates. Learn more at LincolnFinancial.com.Lincoln is committed to creating a diverse and inclusive (https://www.lfg.com/public/aboutus/companyoverview/diversityinclusion?audience_page_id=1422918942386) environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.Follow us on Facebook (http://www.facebook.com/lincolnfinancialgroup) , X (https://mobile.twitter.com/lincolnfingroup) , LinkedIn (https://www.linkedin.com/company/4307?trkInfo=tas%3Alincoln+financial%2Cidx%3A3-1-3&trk=tyah) , and Instagram (https://www.instagram.com/lincolnfingroup/) . For the latest company news, visit our newsroom (https://www.lincolnfinancial.com/public/aboutus/newsroom) .Be Aware of Fraudulent Recruiting ActivitiesIf you are interested in a career at Lincoln, we encourage you to review our current openings and apply on our website. Lincoln values the privacy and security of every applicant and urges all applicants to diligently protect their sensitive personal information from scams targeting job seekers. These scams can take many forms including fake employment applications, bogus interviews and falsified offer letters.Lincoln will not ask applicants to provide their social security numbers, date of birth, bank account information or other sensitive information in job applications. Additionally, our recruiters do not communicate with applicants through free e-mail accounts (Gmail, Yahoo, Hotmail) or conduct interviews utilizing video chat rooms. We will never ask applicants to provide payment during the hiring process or extend an offer without conducting a phone, live video or in-person interview. Please contact Lincoln's fraud team at fraudhotline@lfg.com if you encounter a recruiter or see a job opportunity that seems suspicious.Additional InformationThis position may be subject to Lincoln’s Political Contribution Policy. An offer of employment may be contingent upon disclosing to Lincoln the details of certain political contributions. Lincoln may decline to extend an offer or terminate employment for this role if it determines political contributions made could have an adverse impact on Lincoln’s current or future business interests, misrepresentations were made, or for failure to fully disclose applicable political contributions and or fundraising activities.Any unsolicited resumes or candidate profiles submitted through our web site or to personal e-mail accounts of employees of Lincoln Financial Group are considered property of Lincoln Financial Group and are not subject to payment of agency fees.Lincoln Financial Group (“LFG”) is an Equal Opportunity employer and, as such, is committed in policy and practice to recruit, hire, compensate, train and promote, in all job classifications, without regard to race, color, religion, sex (including pregnancy), age, national origin, disability, sexual orientation, gender identity and expression, Veteran status, or genetic information. Applicants are evaluated on the basis of job qualifications. If you are a person with a disability that impedes your ability to express your interest for a position through our online application process, or require TTY/TDD assistance, contact us by calling 260-455-2558.This Employer Participates in E-Verify. See the E-Verify (https://www.e-verify.gov) notices.Este Empleador Participa en E-Verify. Ver el E-Verify (https://www.e-verify.gov/es) avisos.Lincoln Financial Group ("LFG") is an Equal Opportunity employer and, as such, is committed in policy and practice to recruit, hire, compensate, train and promote, in all job classifications, without regard to race, color, religion, sex (including pregnancy), age, national origin, disability, sexual orientation, gender identity and expression, veterans status, or genetic information. Opportunities throughout LFG are available to employees and applicants and are evaluated on the basis of job qualifications. We have a drug free work environment and we perform pre-employment substance abuse testing.