Senior Incident Response Engineer

Job title: Senior Incident Response Engineer

About the Role You will be the senior-most technical member of the incident response team for Elsevier's global information security organization, providing key insight and research into new threats, exploits, and mitigation techniques. If you consider yourself an innovator in threat detection, this role offers an opportunity to lead incident response initiatives across endpoints, cloud platforms, and enterprise systems.

What You'll Do

• Develop and execute security incident response plans; conduct cyber forensic investigations on physical endpoints and cloud platforms; independently lead the full life-cycle of incident response investigations for all reported security incidents.
• Develop comprehensive incident reports and investigation summaries.
• Develop and collect intelligence to proactively detect and identify high-confidence threats to the brand, service infrastructure and enterprise users and systems.
• Analyze/validate security control requirements and tuning, define mitigation rules, scripting and performing changes or mitigating attacks, and assist with troubleshooting support related to any issues arising from security detection or protection technologies.
• Assist with reviewing existing tools, applications, and processes to strengthen current security capabilities, as well as identify gaps or technical solutions to further enhance the team’s effectiveness.
• Lead analysis and review of security events for anomalous activity; collaborate with respective peer groups to safeguard company information assets against current and foreseen threats.
• Contribute to resilience and readiness of security protection and mitigation technologies and processes to ensure confidentiality, integrity, and availability of the organization’s assets, information, data, and IT services in an efficient manner.

What We're Looking For

• Advanced knowledge of security of cloud-agnostic infrastructure.
• Ability to conduct forensic and incident response investigations.
• Understanding of incident response and risk mitigation workflow and planning.
• Ability to participate in the analysis of security events for anomalous activity; identification of emerging security threats.
• Ability to develop and implement security improvement and remediation programs.
• Possess vulnerability assessment, exploitation techniques, malware reverse engineering, threat analysis, and security threat and incident reporting.
• Ability to participate in the investigation and navigation in Cloud and Web-based environments.
• Possess any of the following licensing/certification: CCFE, GCFE, CISSP, CISM, SANS, GIAC, ISACA, CSRIC (or related), ethical hacking/penetration tester certification, and/or security risk assessment certification.

Compensation & Benefits

• Primary Location Base Pay Range: Home based-New Jersey $89,012 - $142,188 per year.
• U.S. National Base Pay Range: $78,800 - $131,300 per year.
• Geographic differentials may apply in some locations to better reflect local market rates.
• This job is eligible for an annual incentive bonus. Country-specific benefits apply.