IT Security Incident Management Technical Sr. Analyst - AWS

Job Family:

IT Cyber Security

Travel Required:

Up to 10%

Clearance Required:

None

What You Will Do:

Our Security Incident Management Technical Sr. Analyst - Amazon Web Services (AWS) is a member of a service team with upwards of four (4) personnel within the Information Security Operations group that are focused on incident response, data spillage response, eDiscovery/legal retention, phishing/spam/malware response, and threat hunting. Effectively supports and executes multiple or more complex IT Security Incident Management projects that may span company-wide initiatives within scope, timeline, and budget. Applies technical knowledge to innovation and performance improvement while demonstrating critical thinking and sound logic when assessing problems and opportunities in generating solutions. Accountable for ensuring the day-to-day operations of Guidehouse Information Management security systems, maintaining, and protecting Guidehouse and Client data within AWS to the NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, and HITRUST standards, supporting the Office of General Counsel (OGC) with e-Discovery or legal retention holds/investigations within AWS, and managing security events and incidents through proactive hunting and anomaly investigations within AWS. Reports directly to the Security Incident Management Manager.

Job Function:

• Understands and supports the IT Security Incident Management initiatives that support overall IT Security Operations goals and objectives
• Demonstrates effective written and verbal communication skills; delivered in a professional, respectful, and timely manner
• Produces high quality work product leveraging existing templates, tools, and methodologies that align to applicable professional standards and best practices
• Clearly and concisely conveys more complex messages to IT Security Incident Management team; effectively presenting facts and recommendations
• Designs and configures monitoring and alerts using AWS Security Hub in accordance with Guidehouse Policies, Standards, and Procedures
• Assists with the development of incident response strategies and efforts to address security incidents and breaches, minimizing impact on business operations
• Assists in conducting risk assessments and security audits to identify vulnerabilities and recommending mitigations to enhance security posture
• Proactively asks questions, validates what is heard, and shares relevant informed point of view in meetings and client discussions
• Demonstrates the ability to sense and respond to verbal and non-verbal cues and adapt my messages and approach based on the audience
• Demonstrates honest and professional behavior in all interactions
• Identifies risk issues (e.g., technical, client service, engagement, team, internal and external) and escalate them to IT Security supervisors and senior leaders
• Helps with issue resolution, risk mitigation and contingency planning in alignment with IT Security Incident Management leader guidance and IT Security risk mitigation plans
• Uses critical thinking, analysis, expertise, and collaboration to develop technical solutions and solve problems
• Thinks innovatively to proactively identify opportunities for system and process enhancements and make recommendations to IT Security Incident Management leadership
• Works in unstructured or unclear circumstances
• Mentors and/or trains IT Security Incident Management team and/or IT Security, working with supervisor/leaders to position them for success, serving as a resource to peers
• Promotes the development of new technical knowledge and skills within IT Security Incident Management team
• Conducts quality assurance reviews using established or establishing KPIs and self-audit work before showing work to more senior staff and/or clients, learning from mistakes
• Takes ownership of my tasks and the tasks I delegate, resolving issues and escalating as appropriate
• Presents themselves and the company in a manner that always promotes a positive lasting impression of high quality, promptness, and professional service
• Draws from experience to propose solutions to meet needs, focusing the team accordingly
• Builds a high level of trust with stakeholders by meeting and anticipating needs and expectations
• Demonstrates an advanced understanding within AWS and ability to apply technical or specialized knowledge specific to role, industry, business line, and/or functional area within AWS
• Stays current on AWS events, trends, and issues in the news relevant to IT Security
• Ensures prescribed IT Security policies, procedures, and standards are followed while identifying opportunities for system and process enhancements
• Communicates with parties within a