Cyber Security Analyst - Incident Response

Job Type

Full-time

Description

RunBuggy is a technology platform that connects car shippers and haulers. RunBuggy allows shippers to seamlessly connect with their existing management systems to integrate car transportation services, reducing cost, and improving time to deliver. For transporters, RunBuggy offers an alternative to expensive load boards and custom software solutions to better find and manage transportation loads. Since 2019, RunBuggy has grown to over 135 employees, has helped shippers move hundreds of thousands of cars, and has attracted tens of thousands of transporters across the U.S.

We are currently seeking a Cyber Security Analyst - Incident Response. You will be responsible for supporting RunBuggy's cybersecurity efforts by monitoring and analyzing threats, implementing preventative measures, and managing the incident response process. You will work closely with the Senior Cyber Security Analyst and IT team to ensure the protection of our digital assets and systems.

If this sounds just like you, then please read on! if you feel this is not in your wheelhouse, that is okay too! We are actively hiring outstanding professionals, so we encourage you to apply to one of our many other opportunities.

What You Will Be Doing:

• Lead the initial response and triage to all system and network security events and incidents.
• Assist with the program built out for automated detection and response.
• Assist in forensic analysis and behavioral analysis.
• Respond to malware, phishing, social engineering, etc. events and incidents.
• Investigate cloud security events as part of RunBuggy's incident response process.
• Participate in red/blue team exercises, tabletops, and breach simulations.
• Help ensure that the company's data and infrastructure are protected by enabling the appropriate security controls.
• Identify threats and develop suitable defense measures, evaluate system changes for security implications, and recommend enhancements.
• Maintain and update the incident response policy, plan, procedures, and playbooks.
• Review and maintain configurations for cloud-based security systems including monitoring tools such as GuardDuty, CloudWatch, etc.
• Assist with the configuration of network security architectures, including firewalls, ACLs (Access Control Lists), web content filters and Demilitarized Zones (DMZ).
• Perform log reviews and facilitate post incident reviews, document root causes, and actively work with impacted teams addressing resolution actions.
• Observe and respond to IDS (Intrusion Detection System) cues and security alerts.
• Tune and evolve security alerts and signals to ensure security events are addressed timely.
• Other duties as assigned.

Requirements

What You Bring to the Team by Way of Skills and Experience:

• Demonstrated understanding of Cyber Security Analyst principles and domains, predominantly incident response.
• 3+ years' relevant experience as a Cyber Security Analyst in incident response or a SOC.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field preferred. High School Diploma or equivalent required.
• Experienced as a security analyst supporting incident response processes and Security Operation Center (SOC) teams in a cloud environment, such as AWS.
• Experience with containerized applications and related technologies such as Docker, Kubernetes, and related monitoring and alerting tools.
• Experience with managing security configurations and security software in a cloud environment, including application security and encryption technologies.
• Understanding of secure network architectures including, subnetting, DNS, encryption technologies and standards, VPNs, and other network routing methods.
• Experience with advanced persistent threats, phishing, and social engineering, NAC (network access controllers), gateway anti-malware, and enhanced authentication.
• Familiarity with cyber security frameworks such as NIST CSF.
• The ideal candidate will also have:

Professional certifications such as Certified Ethical Hacker (CEH), Certified Information System Security Professional (CISSP), CERT-Certified Computer Security Incident Handler (CERT-CSIH), Certified Computer Forensics Examiner (CCFE), Certified Information Systems Auditor (CISA), or Certified Cloud Security Professional (CCSP).

Knowledge of the latest trends and awareness of current hacking techniques and cybercrime.

Attention to detail, QA skills, the ability to "think forward," adept at problem solving and addressing issues and complications before they expand.

Excellent communication skills, with the ability to explain complex security issues to non-technical stakeholders.

Demonstrated ability to work both independently and collaboratively within a team environment.

What is in it for You and Why you Should Apply:

• Market competitive pay based on education, experience, and location.
• Highly competitive medical, dental, vision, Life w/ AD&D, Short-Term Disability insurance, Long-Term Disability insurance, pet insurance, identity theft protection, and a 401k retirement savings plan.
• Employee wellness program.
• Employee rewards, discounts, and recognition programs.
• Generous company-paid holidays (12 per year), vacation, and sick time.
• Paid paternity/maternity leave.
• Monthly connectivity/home office stipend.
• A supportive and positive space for you to grow and expand your career.

Pay Range Disclosure:

The advertised range represents the expected pay range for this position at the time of posting based on education, experience, skills, location, and other factors.

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

RunBuggy is an equal-opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination, harassment, and retaliation on the basis of race, color, religion, sex (including gender identity and sexual orientation), pregnancy, parental status, national origin, age, disability, genetic information, or any other status protected under federal, state, or local law.

Salary Description

$95,000/yr to $120,000/yr. DOE