The University of Southern California (USC) department of Information Technology Services (ITS) is seeking a Senior Incident Response Analyst with an exceptional commitment to service excellence to join its team.  

As the Senior Incident Response Analyst, you will be an integral member of the Information Technology Services unit, collaborating with diverse and talented team members to help solve multidimensional information technology problems, improve customer experience, and generate value for our campus stakeholders across a broad base of departments and constituencies.

THE WORK YOU WILL DO

The Senior Incident Response Analyst leads the investigation, coordination, resolution, closure and reporting on security incidents. They are responsible for forensically analyzing end-user systems and servers, as well as installing, implementing, configuring and operating numerous security systems and incident response tools. The analyst interacts with server owners, system custodians and IT contacts in pursuit of incident response activities, and consults and assesses perceived threats. They will analyze their findings and develop fact-based reports, and resolve incidents by identifying root causes and solutions.

The Senior Incident Response Analyst

• Leads the investigation, coordination, resolution, closure and reporting on security incidents as they are escalated or identified. Performs complex incident response technical analysis and develops technical conclusions based on analysis of evidence. Reviews analysis and conclusions of other consultants, when applicable.

• Forensically analyzes end-user systems and servers found to have possible indicators of compromise. Analyzes the artifacts collected during a security incident/forensic analysis.

• Installs, implements, configures and operates multiple security systems and incident response tools in an extended enterprise environment.

• Effectively configures and utilizes security detection systems, logs, monitoring alerts and other sources of information to identify and address security threats and events.

• Interfaces and communicates with server owners, system custodians and IT contacts to pursue security incident response activities, including obtaining access to systems, collecting digital artifacts and containing the incident or executing other remediation actions.

• Provides consultation and assessment on perceived security threats. Conducts assessments of client readiness to respond to incidents, including designing and delivering incident response exercises to test client incident response plans. Assists with the ongoing development and improvement of the enterprise incident response plan (IRP). Manages, improves and updates the information security incident response process and protocol documentation.

• Analyzes findings in investigative matters and develops fact-based reports. Regularly provides reporting and metrics to the ITS Information Security organization.

• Resolves security incidents by identifying root causes and solutions.

• Maintains awareness and knowledge of current changes within legal, regulatory, and technology environments which may affect operations. Ensures senior management and staff are informed of any changes and updates in a timely manner. Establishes and maintains appropriate network of professional contacts. Maintains membership in appropriate professional organizations and publications. Attends meetings, seminars and conferences and maintains continuity of any required or desirable certifications, if applicable.

• Performs other related duties as assigned or requested. The university reserves the right to add or change duties at any time.

PREFERRED QUALIFICATIONS

The ideal candidate for the position of Senior Incident Response Analyst has the following qualifications: 

• Three years of experience as an SOC analyst, including one year as a level-three response analyst.

• Prior experience in managed or enterprise information security services, incident response, forensics, malware analysis, penetration testing, or network defense.

• CISSP, CISA, CISM, GSEC, CRISC, or related certification(s).

MINIMUM QUALIFICATIONS

Candidates for the position of Senior Incident Response Analyst must meet the following qualifications:

• Bachelor's degree or combined experience/education as substitute for minimum education

• 5 years of experience as an Incident Response Analyst or similar role.

• Experience with security threats, vulnerabilities, intrusion techniques, malware capabilities and system diagnostics.

• Experience with electronic investigation, forensic tools and methodologies, including log correlation and analysis, forensically handling electronic data, knowledge of the computer security investigative processes, and malware identification and analysis.

• Understanding of legalities surrounding electronic discovery and analysis.

• Experience with SIEM technologies. Excellent analytics and reporting skills.

THE ITS TEAM

The ITS vision aligns strategy, business, and services; affirms ITS cultural values; empowers cross-functional teamwork; embraces world-class best practices; and promotes innovation, excellence, agility, and efficiency. To achieve this vision, ITS is committed to providing a modern technology infrastructure that is resilient and delivers the performance necessary to meet the demands of a growing customer base, training in the latest technologies for its highly productive and motivated workforce, outstanding customer experience, and technology services that are aligned with the university’s mission to provide exceptional learning opportunities for students. ITS is creating a workplace where employees can develop cutting-edge skills, take pride in the services they provide, and have access to the roles and career paths that align to their abilities and potential.  We are looking for top talent to join us on our journey.

ITS CULTURE

USC’s ITS organization represents a diverse and talented team, committed to supporting a collaborative culture and delivering secure and innovative IT services that are core to the mission of the university. We are also committed to creating and maintaining meaningful partnerships across the university. At ITS, we act with integrity in the pursuit of excellence; embrace diversity, equity and inclusion; promote well-being; engage in open two-way communication and are accountable for living our values. ITS strives for a supportive and inclusive culture that encourages employees to do their best work every day and where individuals are recognized and celebrated for their contributions.

ABOUT USC

USC is the leading private research university in Los Angeles—a global center for arts, technology, and international business. With more than 47,500 students, we are located primarily in Los Angeles but also in various US and global satellite locations. As the largest private employer in Los Angeles, responsible for $8 billion annually in economic activity in the region, we offer the opportunity to work in a dynamic and diverse environment, in careers that span a broad spectrum of talents and skills across a variety of academic and professional schools and administrative units. As a USC employee and member of the Trojan Family—the faculty, staff, students, and alumni who make USC a great place to work—you will enjoy excellent benefits, including a variety of well-being programs designed to help individuals achieve work-life balance. USC values diversity and is committed to equal opportunity in employment.

Come join the USC ITS team and work as a trusted partner in shaping an environment of innovation and excellence. Apply today!