Overview
Skills
Job Details
The Tier 3 Incident Response Engineer will provide advanced intrusion detection and incident response services, ensuring the rapid identification, analysis, and containment of security threats. This role involves monitoring network traffic for suspicious activity, conducting in-depth incident response investigations, and coordinating with other cybersecurity team members to mitigate risks. The engineer will follow the published TxDOT incident response strategies, create detailed incident reports, and continuously improve our incident response processes through runbook and playbook documentation and inclusions of real-world lessons learned. By leveraging cutting-edge tools and techniques, this position is crucial for maintaining the security and integrity of our organization's digital assets.
Required Skills:
4 years Demonstrated understanding of cybersecurity principles, including intrusion detection, incident response, and threat intelligence.
6 years Capability to think critically and make quick decisions during high-stress situations.
6 years Awareness of current cyber threats, attack vectors, and mitigation strategies.
6 years of experience in leveraging threat intelligence to anticipate and mitigate risks.
4 years of experience with industry-standard detection tools and analysis techniques.
Preferred Skills and Qualifications
4 Experience with the CISCO security suite of tools
4 Experience with the State of Texas Red Book for incident response (or similar)
4 Experience with IT operations of a Texas State Agency
4 Communication Skills: Strong verbal and written communication skills for effective collaboration and reporting.