Senior Specialist - Cyber Security Incident Response
Overland Park - Sprint, United States
Full Time Senior-level / Expert USD 124K - 249K
Marsh McLennan
Marsh McLennan is the world’s leading professional services firm in risk, strategy and people. We bring together experts from across our four global businesses — Marsh, Guy Carpenter, Mercer and Oliver Wyman — to help make organizations more...Company:
MMC CorporateDescription:
We are seeking a talented individual to join our Global Cyber Defense team at Marsh McLennan. This role will be based in a remote-first environment, with a focus on the Security Operations Center (SOC) during the Sunday - Thursday business hours shift. As a Specialist, you will play a crucial role in analyzing security event data, assessing potential impacts, and creating recommendations to defend against emerging threats while collaborating across multiple teams to strengthen our security posture.
We will count on you to:
- Analyze network traffic, endpoint security events, and various log sources to identify threats, assess potential impact, and recommend mitigations.
- Support other security functions and teams to ensure the holistic implementation of security controls, technologies, practices, and programs.
- Contribute to the development and improvement of response processes, documentation, tool configurations, and detection logic.
- Assist in additional SOC initiatives, including playbook development, new rule creation, and tool evaluations.
- Maintain operational knowledge of global threat trends, known threat actors, common tactics, techniques, and procedures (TTPs), and emerging security technologies.
- Collaborate on SOC team training opportunities and operate as a subject matter expert on various security topics across multiple domains.
What you need to have:
- An undergraduate degree in Computer Science (CS), Computer Information Systems (CIS), or other related degrees, or equivalent experience.
- 2+ years of information security experience and/or 2-4 years of experience in security analysis in a non-security focused role.
- Demonstrated experience with security technologies and alerts, such as intrusion prevention and detection systems, web proxies, SIEM, SOAR, EDR, firewalls, and vulnerability scanners
What makes you stand out:
- Knowledge in one or more of the following domains: Network Operations and Architecture, Operating Systems, Identity and Access Management, Programming, Cloud Computing, Databases, or Cryptography.
- Professional or technical certifications, such as Security+, GIAC Certified Incident Handler (GCIH), Certified Ethical Hacker (CEH), or Certified Information Systems Security Professional (CISSP).
- Excellent critical thinking skills, with proven analytical expertise and the ability to learn adaptively.
- Demonstrated effectiveness communicating security concepts to both technical and non-technical audiences
Why join our team:
- We help you be your best through professional development opportunities, interesting work, and supportive leaders.
- We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and have an impact for colleagues, clients, and communities.
- Our scale enables us to provide a range of career opportunities, as well as benefits and rewards to enhance your well-being.
Tags: CEH CISSP Cloud Computer Science Cryptography Cyber defense EDR Endpoint security Firewalls GCIH GIAC IAM Incident response Intrusion prevention NetOps Security analysis SIEM SOAR SOC Strategy TTPs
Perks/benefits: Career development Competitive pay Flex hours Health care Team events
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.