"Incident Response Analyst"

Position Summary

Rutgers, The State University of New Jersey, is seeking a Incident Response Analyst for the Office of Information Technology. Reporting to the Information Technology Manager, the Incident Response Analyst is expected to perform daily operations of the incident detection and response program, which include dispatching and timely monitoring of information security incidents throughout Rutgers' computing environment. The position will work with senior security staff on cybersecurity operations within Enterprise Infrastructure to discover and remediate security threats on networks, workstations, servers, and other connected devices.

Among the key duties of this position are the following:

• Works with users throughout the University participating in the Operations and Post-Incident phases of the Rutgers Incident Response Program (Detect & Analyze, Contain, Eradicate, Recovery, Report, and Remediate).
• Coordinates and triages response to cybersecurity events.
• Follows the Incident Response Plan throughout the incident response lifecycle.
• Evaluates severity to determine the appropriate response.
• Monitors and analyzes security events and identify trends, attacks, and potential threats.
• Other duties as assigned.
• Adheres to and contributes to the development of documentation standards, policies, practices, procedures and security plans.
• Ensures clear, concises, and timely reports are generated.
• Manages time and priorities to effectively accomplish workload.
• Interfaces effectively in key relationships such as Security Operations, Network Operations, and Enterprise infrastructure as necessary.
• Provides communications about any issues, problems, or plans that are informative, clear, concise and timely.
• Assists with scheduled and on-demand vulnerability scanning activity.
• Assists Rutgers departments and units with remediation.
• Maintains familiarity with current and emerging information security vulnerabilities, threats, and exploits.
• Identifies services, practices and procedures that need improvement.
• Maintains familiarity with HIPAA, PCI, FISMA, GLBA and other Information Security regulations.
• Stays current on security trends by attending appropriate training and/or seminars.
• Interacts with co-workers, visitors, and other staff consistent with Rutgers' values.
• Plans work to accomplish individual projects and achieve group objectives.
• Identifies services, practices and procedures that need improvement.

Minimum Education and Experience

• A bachelor's degree or equivalent education and experience plus two years relevant experience in specialty area.

Equipment Utilized

• Vulnerability scanning.
• Packet capture.
• Firewalls/IPS/IDS/EDR Events.
• Syslog/SIEM.
• Netflow.
• Windows/Linux/Mac.

Physical Demands and Work Environment

Must be able to lift up to 50 pounds for the purpose of moving computer equipment.