
Website State Farm
Job Description:
This opening is for an Incident Response Analyst on the Response team within the CyberSecurity Defense Center. This analyst will be dedicated to automating actions necessary to reduce the time to mitigate security events and incidents, gather pertinent investigative data, correlation of events/actions/alerts, integrations with other security/infrastructure technology and creations of runbooks to fully automate event/incident mitigation actions. The most qualified analysts approach software development with security as a core principle. Some initially training and job shadowing with the Incident Response Analysts will also be necessary to gain perspective into the team’s day to day activities.
Job Responsibilities:
- Applies an expert understanding of development tools, processes, applications, programming languages and environments to assignments
- Practical experience with agile methodologies and continuous integration environments
- Utilizes secure coding practices as a guiding principle in all application development
- Analyze existing workflows to identify and prioritize automation opportunities.
- Drives required product testing practices and solutions to ensure product quality
- Provides highest level of support for problem and issue resolution
- Partner closely with members of the CyberSecurity Defense Center to identify, design and integrate automated response solutions across multiple security tools/technologies
- Champion and provide guidance with an innovative mind set to deliver product solutions
- Enables solution modernization activities through design and development related work items
- Conducts research and integrates industry best practices into processes and potential solutions
Job Requirements:
- Strong understanding of secure API integration techniques
- Strong oral and written communication skills with the ability to communicate complex, technical knowledge
- Security-related degree or certification
- Working knowledge of Splunk Phantom or other Security Orchestration, Automation and Remediation (SOAR) platforms
- Desire to grow cloud knowledge with a focus on AWS and Azure
- Having an automation mindset with the ability to influence others on the power of automation
- Experience utilizing continuous integration/development (CI/CD) tools (Git Lab, pipelines) to manage and deliver software changes
- Proficient in Python and usage of common libraries to build solutions
- Ability to understand/support/enhance existing Python solutions running on Splunk Phantom platform
- Advanced knowledge of cyber security concepts
- Understanding of Flask, State Farm’s Container as a Service (CaaS) infrastructure, Docker and Kubernetes
- Ability to design, code, and deploy software and security solutions
- Participation in peer reviews of code and providing feedback/enhancement recommendations
Qualification & Experience:
- Experience using Elasticsearch, Logstash, Kibana (ELK stack) for integration, troubleshooting and dashboarding
- Experience with other coding languages such as Python, SQL, PowerShell, bash, etc.
- Technical investigation skills and/or experience
Job Details:
Company: State Farm
Vacancy Type: Full Time
Job Location: Bloomington, IL, US
Application Deadline: N/A
careersvite.com