Incident Response Specialist
Pittsburgh, Pennsylvania, Us
Projects:• Test, evaluate, and recommend essential security operations tools and vendors for Endpoint Detection and Response (EDR), Managed Security Service Provider (MSSP), and Security Information and Event Management (SIEM)• Work with team to configure selected SIEM and EDR tools.• Work with team to create a Security Operations Center (SOC) including the MSSP, EDR, and SIEM tools and vendors selected.Roles and Responsibilities:• Currently evaluating our current EDR/AV/SOC requirements and capabilities and suggesting new solutions to meet all of our needs and requirements.• Responsible for identification, isolation, triage, and enterprise-wide remediation for both real and perceived threats.• Drive detection and remediation of known IT security-related infrastructure vulnerabilities.• Identify and investigate gaps and propose solutions for missing capabilities that are identified during remediation and business response.• Help establish a process for measuring and monitoring the effectiveness of the tools and techniques for IT security incidents.• Assist the IT Security Operations Lead in monitoring IT Security-related enterprise metrics and actively run programs, processes or projects as needed to meet or exceed minimum acceptable performance• Create and maintain standard operating procedures related to response to external incidents, internal self-identified vulnerabilities, and insider threats to ensure the team’s preparedness to respond appropriately• Drive remediation of all vulnerabilities on GE Transportation endpoints, ensuring appropriate response to high risk and aged findings.