Security Incident Response

Are you looking for an opportunity to drive meaningful and impactful change within the Tech organization to ensure that business risks are proactively identified and controlled?  If so, this is the role for you.

The Security Incident Response will be a critical function responsible for helping mature and execute on the company’s incident response (IR) playbook. This role will be part of a fast-paced operational area within the Cyber Security department. Analysts responsible for global incident response duties must deal with large amounts of data, working to quickly validate, assess, and mitigate current and potential risk to the company. An Analyst in this role must work across tools, data inputs and third-party intelligence to create actionable items which help increase the security posture for GSK. This role will work across business units, helping provide information security advice and guidance. This role must also help ensure the confidentiality and data integrity within the GSK network.

Key Responsibilities:​

This role will provide YOU the opportunity to lead key activities to progress YOUR career, these responsibilities include some of the following

• Assists in managing corporate incident response program and playbooks.

• Assist in management and coordination of security incident management program, including hands on coordination of highly critical incidents.

• Work with internal and trusted external intelligence related to indicators of compromise (IOC’s) to be converted to actionable information which can be used to strengthen corporate network security posture

• Provide appropriate escalation of information which enables visibility and decision-making process of Cyber Operations leadership team.

• Provide direct technical expertise into the ongoing development of the threat hunting program

• Manages critical incidents through all phases of the incident management lifecycle.

• Analyse security logs, alerts, and outputs from diverse sources to interpret potential security incidents

• Responsible for documentation of incidents and accumulation of statistics and/or metrics related to incident management.

• Authors and provides input into the production of incident reports

• Perform special security projects on an ad hoc basis

• Assist in development of incident response capabilities, training, and tool validation

Why You!

Basic Qualifications

 We are looking for professionals with these required skills to achieve our goals:

• Bachelor's degree in computer science, information systems, or a related technical discipline or professional experience directly related to information security, cyber, or computer network defense

• Experience in security monitoring, threat hunting, and incident response.

• 3 + years of related experience in cybersecurity or computer network defense

• Working knowledge of common security tools, such as a SIEM, EDR, scanners, proxies, or WAF.

Preferred Qualifications:

If you have the following characteristics, it would be a plus:

• Demonstrated experience in an enterprise-level incident response team or security operations center. 

• Comprehensive knowledge of cybersecurity frameworks, threat intelligence, and industry best practices.

• Exceptional communication and teamwork capabilities.

• Strong organizational skills, detail oriented in both written and verbal communications.

• Proficiency in scripting or programming languages is a plus.

• Knowledge of network topology and security to include data analysis, operating system attributes and other industry best practices related to cyber defense strategies.

• Professional certifications like GCIH, ATT&CK Threat Hunting and Detection Engineering Certification, GISAC Cloud Threat Detection (GCTD) or equivalent are highly desirable.

#LI-GSK

The annual base salary for new hires in this position ranges from $80,250 to $133,750 ta