Subject matter expert and technical leader who is passionate about complex information security technology, topics and issues. Responsible for technical and operational duties in the areas of computer network defense analysis, vulnerability assessment and management, incident response and management, threat intelligence, data loss prevention, digital forensics, and threat hunting. Provides customer service and technical support with the goal of improving the overall security posture of the organization.
- Responsible for documenting, monitoring and reporting on various security related systems and processes to ensure system and data integrity, security and availability.
- Creation of policy, day to day management, administration and maintenance of Information Security tool set.
- Identification of any tool or visibility gap in the existing tool set.
- Identification of team requirements for any given technology, documentation of the current or proposed architecture, lead any proof of concept and document results, quantify any recommendations for the use of any new security tool, process or procedure.
- Cross training the team on day to day use, standard operating procedures and tuning of the security tool set.
- Analyze threat intelligence and risks. Identify and document impact to Boyd and any mitigation or remediation actions required.
- Lead initiatives and own the outcomes related to remediation or mitigation against identified day zero attacks. Liaise with cross functional teams to facilitate and ensure implementation of any necessary tasks to defend against the risk.
- Escalation point and technical subject matter expert for Security Analysts and any third-party security providers.
- Responsible for tracking all security incidents to resolution.
- Leading defensive protocols and programs when attacks occur.
- Simulating attacks to identify potential areas of weakness in defenses and alerting.
- Writing detailed reports and providing accurate metrics.
- Perform the role and duties of an internal expert on matters relating to threat detection and incident response.
- Lead investigations into attacks and indicators of compromise. Provide a coordinated response to applicable complex cyber-attacks.
- Contribute to the ongoing development and improvement of security monitoring and incident response processes and solutions as required to support Boyd鈥檚 Information Security program and exceed team objectives.
- Tracking cybersecurity news and trends for applicable systems, and reporting concerns to appropriate resources.
- Documenting and updating security related policies, including participation in the periodic review process and managing policy exceptions and risk acceptances in coordination with the Boyd Risk and Compliance teams.
- Manage, update, modify alerts, adjust/tune event correlation rules to increase accuracy/relevance/effectiveness and create new rules based on threat changes and evolving risks.
- Use creativity and innovation to automate and streamline team processes and procedures.
- Perform event correlation, analysis of malicious activity indicators and appropriate response based on review and access to multiple security tools.