Incident Response Analyst I

Centene Management Company LLC is hiring an Incident Response Analyst I to investigate security incidents and support execution of the enterprise Incident Response Plan. The role contributes to incident remediation, preventative security measures, and leadership briefings and reporting.

What you'll do:

• Triages and investigates security alerts, events, and notifications end to end across endpoint, email, identity, and network telemetry according to agreed alert priority levels, and escalates confirmed or suspected incidents to DFIR in accordance with defined escalation criteria
• Analyzes reported and detected phishing and malicious email to determine disposition
• Documents investigation steps, findings, and dispositions in the case management system
• Executes approved containment actions, such as indicator of compromise (IOC) blocking and host isolation
• Identifies detection tuning and automation opportunities to reduce manual effort
• Supports the review of security configurations on Centene’s production information systems and networks when gaps are identified during investigations
• Assists with the prevention and resolution of security breaches and ensures incident and response management processes are initiated
• Assists with access authorization reviews and access controls validation when required to support security investigations
• Contributes to the development of automated scripts, response playbooks, and other programmed responses which are launched when an attack against Centene’s systems has been detected
• Collaborates with Information Security Architects, Information Security Engineers, and software or hardware stakeholders at Centene
• Integrates third-party attack monitoring services and threat reporting services into internal CIRT (Cyber Incident Response Team) communications systems
• Performs other duties as assigned

What they're looking for:

• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future
• A Bachelor's degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science) and requires 0 – 2 years of related experience
• Or equivalent experience acquired through accomplishments of applicable knowledge, duties, scope and skill reflective of the level of this position
• Or completion of a Centene-sponsored emerging talent program
• Networking fundamentals (e.g., TCP/IP, DNS, HTTP) and network and infrastructure technologies, including routers, switches, and firewalls
• Windows and Linux operating system fundamentals
• Log analysis and investigation of security events
• Knowledge of indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) used by threat actors
• Skills may be gained through academic, lab, internship, or professional experience
• Beginner - Seeks to acquire knowledge in area of specialty
• Beginner - Ability to identify basic problems and procedural. irregularities, collect data, establish facts, and draw valid conclusions
• Hands-on familiarity with endpoint detection and response (EDR) tools (e.g., CrowdStrike, Microsoft Defender for Endpoint)

Benefits:

• Health insurance
• 401K and stock purchase plans
• Tuition reimbursement
• Paid time off plus holidays
• A flexible approach to work with remote, hybrid, field or office work schedules