Cybersecurity Senior Incident Response Analyst (Remote in US, preference hybrid based in Dallas, TX)

Tenet is seeking a Senior Incident Response Analyst to work for Tenet Healthcare.  Below is a brief outline of what Tenet is seeking for this role.

The Senior Incident Response Analyst will report to the Tenet Incident Response Manager. As the Incident Response analyst, you will respond to high severity cyber security threats while documenting and reporting incidents through the incident response lifecycle. The analyst will perform endpoint and network forensics, basic malware analysis, threat hunting, etc. You will apply your technical knowledge and investigative skills to perform in-depth analysis and report your findings and conclusions to management. 

Can be fully remote but preference is on-site (Mon-Thursday to start and eventually it being more of a flexible hybrid 2-3 days a week onsite at HQ)

Key Accountabilities

The functions listed describe the business purpose of this job. Specific duties or tasks may vary and be documented separately. The employee might not be required to perform all the functions listed. Additional duties may be assigned, and functions may be modified, according to business necessity.

• Respond to incident using the incident response cycle: Preparation, Detection/Identification, Containment, Eradication, Recovery, and follow-up
• Perform threat hunting using EDR solution, Splunk and other security tools
• Evaluate threats and threat intelligence sources and determine organization risk and improve threat detection
• Conduct host-based forensics and analysis to identify threat, root cause, impact, etc
• Communicate with various teams across the enterprise to perform initial triage and information gathering of security incidents
• Consistently review playbooks and improve as necessary
• Perform basic malware analysis to identify basic IOCs and/or BIOCs
• Build and maintain sandbox environment to be able to safely investigate threats
• Deliver findings, recommendations, and remediation steps for all activities
• Create reports and document incidents

Skills, Experience & Competencies

• Bachelor’s degree in information security or a related field or an equivalent combination of training and experience.
• Strong experience with EDR, CrowdStrike preferred
• Highly experienced and skilled using Splunk to perform investigations and threat hunts 
• Highly experienced performing endpoint forensics. DFIR experience required.
• 3+ years of experience in the Incident Response field
• Red Team experience
• One or more professional security certifications such as CISSP, CEH, GIAC, or ECIH 
• Experience with intrusion detection, network security management, endpoint security and architecture
• Basic malware analysis

Tenet Healthcare/USPI complies with federal, state, and/or local laws regarding mandatory vaccination of its workforce.  If you are offered this position and must be vaccinated under any applicable law, you will be required to show proof of full vaccination or obtain an approval of a religious or medical exemption prior to your start date.  If you receive an exemption from the vaccination requirement, you will be required to submit to regular testing in accordance with the law.                                   

#LI-NO1   

Protect life, property, information, and reputation by employing situational awareness; monitoring and securing designated entrances/exits; observing the flow of employees, patients, physicians, students, vendors, and visitors into the facility; verifying credentials, and providing directions to authorized areas. Evaluate and respond in a timely manner to events and incidents in accordance with System policies. Provides exceptional customer service to staff, patients, visitors, and physicians. Respond immediately, or as the appropriate, to emergency/unusual situations including disturbances, disruptive employees, patients, vendors & visitors, fires, and medical emergencies (i.e., including, but not limited to restraining agitated patients in accordance with Tenet Corporate Security and facility policy). Prepares and submits all required incident documentation according to Tenet Corporate Security and facility policies and procedures. Maintains in-depth knowledge of all security orders, written and oral, pertaining to assigned duties, as well as working knowledge of regulatory requirements.

Education:

Required: High school graduate or GED; or equivalent combination of education and experience.

Experience:

Required: 2 years in a security role, law enforcement, or military background; or a minimum of 3 years of strong customer service roles with the ability and willingness to learn security practices.

Certifications:

Required: Licensure/certification as requ