Cyber Security Investigations Lead
CSAA Insurance GroupAbout the role
External candidates: In order for your application to be correctly processed please sign-in before you apply
Internal candidates: Please go to Workday and click "Find Jobs" link under Career
Thank you for considering opportunities with us!
Job Title
Cyber Security Investigations LeadRequisition Number
R7116 Cyber Security Investigations Lead (Open)Location
Arizona - Home TeleworkersAdditional Locations
Job Information
CSAA Insurance Group (CSAA IG), a AAA insurer, is one of the top personal lines property and casualty insurance groups in the U.S. Our employees proudly live our core beliefs and fulfill our enduring purpose to help members prevent, prepare for and recover from life's uncertainties, and we're proud of the culture we create together. As we commit to progress over perfection, we recognize that every day is an opportunity to be innovative and adaptable. At CSAA IG, we hire good people for a brighter tomorrow. We are actively hiring for a Cyber Security Investigations Lead! Join us and support CSAA IG in achieving our goals.
Your Role: We are seeking a skilled cyber security incident investigation lead. The position will provide the security investigations team the expertise in incident handling, in-depth analysis, forensics, advanced attack techniques and reconnaissance techniques. The ideal candidate will have experience in documenting investigations and providing clear evidence-based decisions within an investigation.
Your Work:
Lead security investigations in collaboration with SOC personnel, ensuring deeper potential threats and root causes are thoroughly explored.
Strong leadership skills and the ability to inform others during the incident and crisis management processes
Expertise across multiple operating systems on host-based forensic processes
Able to evaluate correlation rules and outcomes via security information and event management (SIEM) and security orchestration, automation, and response (SOAR) platforms.
Expertise on network traffic patterns associated to attacks and expected sources for those patterns
Technical understanding of current cybersecurity threats and trends.
Familiarity with and contribution to the detection engineering process
Excellent communication (oral and written), interpersonal, organizational, and presentation skills
Required Experience, Education and Skills
Bachelor’s degree in computer science, Information Technology, or a related field
Significant equivalent work experience will be considered
10+ years of IT and relevant security experience
6+ years of experience leading or serving as a member of a CERT or other similar function
Knowledge of current and emerging technologies and tactics used within a SOC and how they can be applied to improve efficiency and effectiveness
Understanding of the information security industry and the current threat landscape
What would make us excited about you?
Actively shapes our company culture (e.g., supporting employee resource groups, mentoring employees, volunteering, joining cross-functional projects)
Champions our cultural norms (e.g., willing to have cameras when it matters: helping onboard new team members, building relationships, etc.)
Demonstrates a company ownership mindset, thinking beyond boundaries of their own area
Travels as needed for role, including divisional / team meetings and other in-person meetings
Fulfills business needs, which may include investing extra time, helping other teams, etc
CSAA IG Careers
At CSAA IG, we’re proudly devoted to protecting our customers, our employees, our communities, and the world at large. We are on a climate journey to continue to do better for our people, our business, and our planet. Taking bold action and leading by example. We are citizens for a changing world, and we continually change to meet it.
Join us if you…
BELIEVE in a mission focused on building a community of service, rooted in inclusion and belonging.
COMMIT to being there for our customers and employees.
CREATE a sense of purpose that serves the greater good through innovation.
Recognition: We offer a total compensation package, performance bonus, 401(k) with a company match, and so much more! Read more about what we offer and what it is like to be a part of our dynamic team at <
Apply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s