Information Security Sr Analyst

About Black & Veatch

At Black & Veatch, we recognize that true value originates from the unique skills and diverse experiences of our professionals. By fostering the exchange of ideas among a wide range of individuals, our teams gain broader perspectives, enabling us to discover superior solutions for our clients.

Job Summary

The Information Security Sr. Analyst - Incident Response will be an integral part of our computer security incident response team. This role involves developing and implementing standards, procedures, and processes to detect, prevent, and recover from security incidents. Designed for an early-career analyst, this position offers significant opportunities for learning and professional growth within cybersecurity. Success in this technically demanding role requires strong technical acumen, passion, and determination, which will be key factors during the interview process.

Key Responsibilities

• Respond to computer security incidents in accordance with established policies and procedures.
• Provide technical guidance to first responders managing cybersecurity incidents.
• Deliver timely and relevant updates to stakeholders and decision-makers.
• Communicate investigation findings to business units to enhance overall cybersecurity posture.
• Validate and maintain incident response plans and processes to effectively address potential threats.
• Compile and analyze data for management reporting and metrics.
• Assess the potential impact of new threats and communicate associated risks to detection engineering functions.
• Perform root-cause analysis, document findings, and participate in elimination activities as needed.
• Triage and assess the risk of incidents, conduct real-time analysis, and manage workload during investigations.
• Develop runbooks for recurring incidents to automate or assist with resolution.

Preferred Qualifications

• Candidates will be assessed based on their demonstrated ability to meet the required competencies for the role.
• Evaluation will focus on the ability to perform the listed duties while exhibiting the skills and competencies necessary for high effectiveness, including:
• Superior communication skills, capable of conveying complex technical issues to diverse audiences clearly, authoritatively, and actionably, both orally and in writing.
• A strong understanding of organizational mission, values, and goals, and their consistent application.
• Robust decision-making capabilities, with a proven ability to weigh costs and benefits of potential actions and select the most appropriate course.
• A demonstrated ability to influence others to modify their opinions, plans, or behaviors.
• A team-oriented mindset with a proven ability to collaborate effectively with diverse stakeholders.
• Excellent problem-solving and troubleshooting skills.

Minimum Qualifications

• A minimum of 5 years of experience in incident response.
• A Bachelor's or Master's degree in computer science, information security, or a related field.
• Familiarity with incident response frameworks and methodologies such as NIST 800-61 and MITRE ATT&CK.
• Experience with incident response tools and technologies, including Security Information and Event Management (SIEM), forensics, and threat intelligence platforms (even in a lab environment is beneficial).
• Experience in reporting and communicating incident details, improving incident response processes, and facilitating recovery from security incidents is beneficial.

All applicants must be able to complete pre-employment onboarding, which may include background checks, drug screenings, and motor vehicle record searches, in compliance with applicable laws and regulations.

Certifications

Contact Compensation

Work Environment/Physical Demands

Contact Compensation

Competencies

Salary Plan

ITS: Information Technology Service

Job Grade

016