Senior CERT Analyst (experienced level professional)

Overview

Michelin is hiring! We are looking for a highly technical performer who has a passion for cybersecurity outstanding attention to detail with solid analytical and problem-solving skills. For this senior position we need an individual skilled in advising other incident analysts and leading various complex incident response scenarios. Youll bring deep technical strength calm judgment under pressure and a collaborative approach to restoring services safely while reducing risk.

The opportunity

Step into a role where every day brings a new challenge and a chance to make a real impact. As a Senior CERT Analyst you are at the heart of the organizations cyber defenseproactively tracking emerging threats analyzing incidents and mitigating risks. If youre energized by solving complex problems working in a fast-paced environment and making a tangible impact on global security this is the role for you: come join our team!

Michelin CERT (Computer Emergency Response Team) is Michelins global cyber-defense team supporting facilities worldwide 24x7 with analysts in Europe Asia and the Americas. We focus on 3 incident response missions: assessing impact coordinating containment and remediation and reducing risk to an acceptable level.

This position is based at our headquarters in Greenville SC conveniently located within driving distance to east coast beaches the Blue Ridge Mountains and large cities like Atlanta and Charlotte. The mild climate charming downtown and impressive culinary scene are just a few of the perks of living here.

What you will do

Prevent: Know the latest evolving threats and security technologies; assess and contextualize risk; share findings with technical partners and the global CERT network.

Detect: Triage alerts ascertain severity and provide mentorship during high-severity events; participate in shared on-call coverage (including weekends/holidays).

Lead business-as-usual and complex incidents including intrusions malware and ransomware from start to end. Coordinate containment eradication and recovery across global teams. Maintain clear communication with collaborators while protecting privacy and confidentiality.

Expected Coverage Window

Lead all aspects of global security incidents from 10 am 7 pm EST/EDT Weekdays. Weekend and holiday coverage is shared globally by CERT teams (weekend coverage provided by one analyst per zone for a weekend).

Exceptionally be available 24/7 to participate in emergency actions for critical severity events if needed.

What you will bring

• A solid record of accomplishment for security incident response including leading cyber crisis response providing security expertise leading and prioritizing multiple incident workstreams. Capable of defining new procedures and applying best in class security practices
• Strong knowledge of the cyber kill chain and MITRE ATT&CK for investigation and reporting
• Hands-on expertise with network forensics and malware identification / eradication
• Ability to analyze data from cyber defense tools (e.g. SIEM/EDR network traffic IDS/IPS firewall and system logs OSINT) to identify threats resolve impact and recommend mitigations
• Demonstrated ability to make key decisions to navigate cyber or security events and take a course of action based on the assessment of the current scenario or situation. Ability to perform quick identification of impacts to the enterprise from various data sources and recommend appropriate countermeasures and mitigations
• Solid understanding of Windows/Linux environments (2-3 years Administration/DEVOps) networking concepts/protocols architecture and system/application hardening
• Clear written and verbal English communication including executive-ready updates; strong documentation habits
• Good interpersonal skills and collaboration abilities with strong team-orientation
• Ability to mentor junior analysts; comfortable working across time zones
• Strong dedication to data protection and discretion following privacy & confidentiality policies.
• An ability to learn and apply new technologies quickly
• Knowledge or usage of tools such as Splunk Python PowerShell DB query language / tools or others used in offensive and defensive security is a plus.

Other requirements

Education: Minimal 2-year technical degree with 5 years of relevant experience in Information Security or bachelors degree (Computer Science Cybersecurity Information Technology or Computer Engineering).

Travel within North America and Global may be required but infrequent.

Minimum 5 years experience in incident response (CERT/SOC/CSIRT - Manager Technical Lead or Forensics Analyst)

#LI-hiringmichelin

#LI-RG1