Incident Response Analyst

 

 

Are you looking for more?
 

At Mohawk Industries, we’re committed to more – more customer solutions, more process improvements, more sustainable manufacturing and more opportunities for our team.

As a Fortune 500, global flooring leader with some of the best-known brands in the industry, Mohawk is a great place to start or develop your career with an emphasis on more of what’s important to you. Whether you want to lead more, innovate more, learn more or create more, you can find your more with Mohawk.

 

 

What we need:

 

The Incident Response Analyst is an established performer who will be responsible for monitoring, analyzing, and responding to information security incidents and threats. This role will work closely with cross-functional teams to investigate security alerts, conduct forensic analysis, and implement remediation measures to minimize the impact of incidents.

 

What you’ll do:

 

• Monitor security alerts and events from various sources, such as SIEM, IDS/IPS, and endpoint detection systems, to identify potential security incidents.
• Analyze network traffic, system logs, and other data sources to detect and investigate anomalous activities and potential security breaches.
• Maintain situational awareness of the current threat landscape and emerging cybersecurity trends.
• Investigate cybersecurity incidents, including malware infections, data breaches, unauthorized access, and insider threats.
• Conduct forensic analysis of compromised systems to identify the root cause of incidents and determine the extent of the impact.
• Document incident findings, including timelines, evidence, and remediation actions, in accordance with established procedures and guidelines.
• Coordinate with internal stakeholders, such as IT, Security Operations Center (SOC), and Legal teams, to contain and mitigate security incidents in a timely manner.
• Implement remediation measures, such as system patches, configuration changes, and access controls, to prevent further exploitation and recurrence of incidents.
• Communicate effectively with stakeholders, including management, IT staff, and end users, to provide updates on incident response activities and ensure timely resolution.
• Prepare incident reports and post-incident summaries detailing the nature of incidents, response actions taken, and lessons learned.
• Document incident response procedures, playbooks, and standard operating procedures (SOPs) to facilitate knowledge sharing and continuous improvement.
• Provide recommendations for enhancing incident detection and response capabilities based on lessons learned from incidents and security assessments.
• Monitor external threat intelligence sources for indicators of compromise (IOCs), malware signatures, and emerging cyber threats.
• Analyze threat intelligence reports and assess the potential impact of identified threats on organizational security posture.
• Collaborate with threat intelligence analysts and external partners to exchange information and stay ahead of evolving threats.
• Perform other duties as needed.

 

What you have:

 

• Bachelor’s degree in a related field or equivalent education and/or experience.         
• 2-4 years of job-related experience or equivalent education and/or experience.         
• Strong understanding of cybersecurity principles, methodologies, and best practices preferred.
• Proficiency in security tools and technologies, such as SIEM, IDS/IPS, EDR, and forensic analysis tools preferred.
• Knowledge of industry standards and frameworks, such as NIST Cybersecurity Framework, MITRE ATT&CK Framework, and ISO/IEC 27001 preferred.

 

What else?

 

• Demonstrates strong knowledge of technical, process, and business principles as well as industry practices and standards.
• Excellent communication, problem solving, and organizational skills.
• Able to multitask, prioritize, and manage time effectively.
• High level of integrity and discretion i