Principal Incident Response Analyst

Centene Corporation is a diversified, national organization that aims to improve health outcomes through technology. The Principal Incident Response Analyst will execute the enterprise-wide Incident Response Plan, recommend enhancements for security, and collaborate with various business units to improve remediation efforts.

Responsibilities:

• Keeps abreast of security breaches and ensure incident and response management processes are initiated
• Implements security service audit schedules, review access authorization, and perform the required access controls testing to identify security shortfalls
• Automated scripts, contingency plans, and other programmed responses which are launched when an attack against Centene’s systems has been detected
• Collaborates with Information Security Architects, Information Security Engineers, and software or hardware stakeholders at Centene
• Ties third party attack monitoring services and threat reporting services, into internal CIRT (Cyber Incident Response Team) communications systems
• Performs other duties as assigned
• Complies with all policies and standards

Requirements:

• A Bachelor's degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science)
• Deep functional and Centene specific knowledge with 6 – 8 years of related experience
• Or equivalent experience acquired through accomplishments of applicable knowledge, duties, scope and skill reflective of the level of this position
• Advanced - Seeks to acquire knowledge in area of specialty
• Advanced - Ability to identify basic problems and procedural irregularities, collect data, establish facts, and draw valid conclusions
• Advanced - Ability to work independently
• Advanced - Demonstrated analytical skills
• Advanced - Demonstrated project management skills
• Advanced - Demonstrates a high level of accuracy, even under pressure
• Advanced - Demonstrates excellent judgment and decision making skills
• Advanced - Ability to communicate and make recommendations to upper management
• Advanced - Ability to drive multiple projects to successful completion
• Advanced - Possesses technical aptitude
• Knowledge of Other: Tools, techniques and processes (TTP) used by threat actors
• Knowledge of Other: Indicators of compromise (IOC)
• Experience with Other: Endpoint protection and enterprise detection & response software (such as CrowdStrike or Carbon Black)
• Knowledge of Other: Network and infrastructure technologies including routers, switches, firewalls, etc