Associate Incident Response Specialist

Company:

The Boeing Company is currently seeking an Associate Incident Response Specialist to join the team in Hazelwood MO or Mesa AZ.

This Individual will be responsible for supporting the 24x7 cybersecurity monitoring of the Boeing Enterprise Network on a variable shift with strong risk management skills and excellent communication.

Position Responsibilities:

• Perform incident response activities across enterprise cloud and subsidiary stacks meeting 24x7 triage/response Service Level Agreements (SLAs) and driving cases to clear risk-framed conclusions

• Validate incident indicators with intel and context/enrichment via trusted sources and raise tuning requests to improve alert fidelity

• Scope incidents end-to-end

• Triage alerts and report suspicious activity

• Determine affected assets/identities and articulate business impact

• Understand and reconstruct cyber intrusion paths via Security Information and Event Management (SIEM) Endpoint Detection and Response (EDR) cloud and email tools

• Correlate events and perform malware analysis

• Merge signals across SIEM EDR cloud and email tool

• Execute indicator reputation and sandboxing to analyze malware samples

• Execute and verify containment isolate hosts block indicators and quarantine malicious emails per team Standard Operating Procedures (SOPs)

BasicQualifications (Required Skills/Experience):

• 1 years of experience with Threat Management and/or Threat Assessment

• Experience with network and host-based Intrusion Detection Systems (IDSs) and Security Incident Event Management (SIEM)

• Knowledge of cyber security incident response protocols (identification impact assessment containment remediation evidence handling technical reporting etc.) and safeguarding information

• Willing to work variable shifts including weekends holidays and overtime

Preferred Qualifications (Desired Skills/Experience):

• Bachelors degree or higher

• Security Computing Technology Industry Association (CompTIA) Cybersecurity Analyst (CySA) Global Information Assurance Certification (GIAC)/Global Certified Incident Handler (GCIH)/Certified Intrusion Analyst certification (GCIA)/ Global Citizenship Education (GCED) SC-200/AZ-500 Amazon Web Service (AWS) Certified Cloud Practitioner/Solutions Architect Associate (CCP/SAA) or equivalent cloud/security certifications

• Experience balancing multiple competing priorities and work streams

• Experience with reading logs formulating hypotheses and testing them with queries

• Experience with Security Operations Center (24x7 or on-call) in security monitoring incident response or digital forensics

• Experience with cloud security monitoring exposure: Azure/Microsoft 365 (M365) Amazon Wed Services (AWS) or Google Cloud Platform (GCP)

• Experience with Security Orchestration Automation and Response (SOAR): executing playbooks understanding/creating simple automations and/or form updates

• Experience with hash reputation checks sandbox/detonation workflow and using findings to drive detection/tuning

• Experience with Kusto Query Language (KQL)/Search Processing Languages (SPL)/Structured Query Language (SQL) and/or regex

• Experience with Python or PowerShell used in investigations

• Experience with case documentation excellence tool or investigation demos

Drug Free Workplace:

Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana cocaine opioids amphetamines PCP and alcohol when criteria is met as outlined in our policies.

Pay & Benefits:

At Boeing we strive to deliver a Total Rewards package that will attract engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities.

The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs generally including health insurance flexible spending accounts health savings accounts retirement savings plans life and disability insurance programs and a number of programs that provide for both paid and unpaid time away from work.

The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location date of hire and the applicability of collective bargaining agreements.

Pay is based upon candidate experience and qualifications as well as market and business considerations.

Summary pay range: $78200 $105800

Language Requirements:

Education:

Relocation:

Export Control Requirement:

Safety Sensitive:

Security Clearance:

Visa Sponsorship:

Contingent Upon Award Program

Shift:

Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website. Learn how to protect yourself from recruitment fraud - Recruitment Fraud Warning