Incident Response Cyber Analyst

Incident Response Analyst will report to the Manager of Incident Response and will be responsible for Tier 2 or Tier 3 Triage support of cyber security event escalations. As an Incident Response Analyst, you will be part of a cross functional Incident Response team of Incident Response Analysts who are responsible for security operations including log analysis, application security analysis, vulnerability analysis, incident response, and threat analysis.

This role evaluates the type and severity of security events leveraging their in-depth knowledge of exploits and vulnerabilities and works with the Incident Response Lead Investigator in investigating and responding to security incidents.

• Review security escalation alerts and evaluate urgency and relevancy
• Perform security investigation and triage using analyst tools and techniques and determine criticality of potential security threats
• Follow runbook for incident escalation and event management
• Request or review vulnerability scan information and review the assessment report.
• Advises on configuration of security monitoring tools.
• Analyze additional log correlation
• Analyze network traffic and data
• Escalate as necessary cyber incident findings and preliminary investigation results to IR Lead Investigator
• Maintain technical currency and continuously leverage opportunities to strengthen skills and broaden expertise.
• Review Cyber Security Intelligence to determine relevancy to Frontier and research as necessary, collaborating with Vulnerability Management and IT Operations to determine exposure to zero-day vulnerabilities
• Serve in monthly on call rotation for after hours escalations
• Identify opportunities for automation and orchestration and make recommendations
• Generate tickets as needed to engage appropriate IT resources

• In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management etc.
• 2+ years of SOC experience, including incident response triage, threat hunting, and configuring alerting rules
• Experience with automation (Powershell, Python, APIs, etc.) for IR activities
• Solid understanding of cyber landscape and typical threat vectors
• Working knowledge of security technologies such as: SIEM, EDR, FW, AD, IPS, SOAR, WAF, CTI, Application and Email Defense, Sand Box
• Fluency in spoken and written English
• Preferred: experience with Azure and AWS cloud technologies

• BA/BS Degree in relevant technology discipline or can substitute for additional experience in field

• CISSP Certified Information Systems Security Professional IT security certifications (CISSP, CISM, CISA, GIAC, CYSA, CEH or similar) Preferred

We are deeply committed to attracting talented team members in the US from all backgrounds regardless of race, age, gender, ethnicity, religion, sexual orientation, disability status, or nationality. However, at this time, we are not sponsoring any Visas.

Connecting communities is at the heart of what we do. We are committed to building a team that reflects the communities we serve. If your background and experiences are aligned with our passion to improve digital access across America, we encourage you to apply and help us achieve our mission to #Build Gigabit America .

Frontier Communications is an affirmative action and equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against based on disability.