- Kansas, United States
- 4+ years
The Cybersecurity Investigator plays a critical role in protecting BlueScope North America's information assets by monitoring, investigating, containing, and responding to cybersecurity threats.
Responsibilities
- Monitor and investigate security events and alerts from SIEM, endpoint detection and response, identity, email, cloud, network, and other cybersecurity technologies.
- Perform advanced triage and analysis of suspicious activity, potential policy violations, and confirmed security incidents.
- Analyze endpoint, identity, application, cloud, and network telemetry to determine incident scope, impact, and likely root cause.
- Correlate security telemetry, threat intelligence, and contextual information to distinguish malicious activity from expected business operations.
- Document investigative actions, evidence, findings, and conclusions in a clear and repeatable manner.
Requirements
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline; or equivalent education and practical experience.
- Nice to have: GCIH
- Nice to have: GCIA
- Nice to have: GCFA
- Nice to have: CySA+