Pay Growth
?
out of 5
Not enough data
Not enough info to score pay or growth
Senior Engineer, Cybersecurity DFIR
Job
Intercontinental Exchange (ICE)
Provo, UT (In Person)
Full-Time
Review key factors to help you decide if the role fits your goals.
Job Security
?
out of 5
Not enough data
Calculating job security score...
Total Score
80
out of 100
Average of individual scores
Skill Insights
Compare your current skills to what this opportunity needs—we'll show you what you already have and what could strengthen your application.
Job Description
Overview
- Job Purpose
- The ICE Cybersecurity Digital Forensics and Incident Response (DFIR) team is responsible for defending critical financial infrastructure from Global Cyber threats. We leverage an evolving arsenal of controls that require technical proficiency as well as tenacity, professionalism, and strong communication skills.
- Responsibilities
- + Security Analytics
- Efficiently distill actionable information from large data sets for reporting, hunting, and anomaly detection + Incident Management
- Detect, document, investigate, and resolve security incidents in an efficient manner + Endpoint Forensics
- Construct meaningful incident timelines from forensic artifact analysis + Counter Measures
- Ability to design and implement preventative and corrective controls to counteract emerging threats + Proactive Threat Hunting
- Develop and execute focused plans to discover advanced threats that evade traditional security controls + Behavioral Analysis
- Develop and implement criteria to identify anomalous user behavior leading indicating insider threat activity + Intrusion Detection
- Develop and tune network anomaly control capability to produce reliable actionable data + Threat Hunting
- Proactively search for unknown threats within the environment.
- Knowledge and Experience
- + University degree in Engineering, MIS, CIS, or related discipline; or equivalent years of experience + 5+ years of relevant experience + Hands-on experience with Systems Administration + Deep understanding of networking and its application + Experience in cloud or container security, including incident response in cloud and hybrid deployments.