Please contact your Administrator to change your authorization settings.
At Northwestern Mutual, we believe relationships are built on trust. That our lives and our work matter. These beliefs launched our company nearly 160 years ago. Today, they're just a few of the reasons why people choose to build careers at Northwestern Mutual!
We're strong and growing. In a company with such a long and storied history, this may be the most exciting and important time to be a part of Northwestern Mutual. We're strong, innovative, and growing
We invest in our people. We provide opportunities for employees to grow themselves, their career, and in turn, our business.
This is a hybrid position at either our Milwaukee office or our New York City office. ( The Milwaukee office requires onsite M, T, and W or in our NYC office on Thursday plus 1 other day.)
What's the role?
As a DFIR Engineer on the Threat Detection & Response team, your role will include responding to, investigating and containing anomalous or malicious activity that could indicate a security threat. You'll be responsible for staying up to date on the latest cybersecurity threats and assisting in the continual development and refinement related to monitoring, detecting and responding to abnormal network and host activity.
Responsibilities:
-
Triage, pivot and correlate across multiple network and host-based log sources.
-
Analyze system artifacts and memory for evidence of compromise.
-
Proactively hunt for and identify malicious activity in various log sources using threat intelligence and other indicators of compromise.
-
Document detailed findings including timelines of events or incidents
-
Continually improve incident response procedures and documentation.
-
Engage with Detection Engineering and Red Team to identify opportunities to better monitor/detect suspicious behavior and automate response capabilities.
-
Keep up to date on evolving cyber threats and identify methods to detect them.
-
Participate in an on-call rotation with other Incident Response Engineers
Desirable Skills:
-
Experience with security tools including SIEM, EDR, AV, CASB, Next-gen Firewalls, and VPN.
-
Experience with system and network artifacts.
-
Working knowledge of the MITRE ATT&CK framework.
-
Familiarity with various cloud environments and containerization technologies (AWS, Azure, O365, Docker, Kubernetes).
-
Functional and practical experience with at least one development or scripting language/framework (e.g. PowerShell, Python, .Net) and regular expressions.
Minimum Qualifications:
-
Bachelor's Degree in Information Security, Computer Science, or equivalent combination of education, training, and experience.
-
Two or more years in an Incident Response or Security Operations Center (SOC) role.
-
Background in information technology with an emphasis on network or systems administration.
-
Hold or willingness to obtain certifications such as GCIH, GCFE, GCFA, GDAT, CISSP or other relevant security certifications.
Our Benefits!
-
Tons of room for career growth.
-
We offer highly competitive compensation, including annual bonus opportunities
-
Medical/Dental/Vision plans, 401(k), pension program
-
We provide tuition reimbursement, PTO, and Holiday Pay
-
We provide extensive Professional Training Opportunities
-
We offer an excellent Work/Life Balance
#LI-Hybrid
Compensation Range:
Pay Range - Start:
Pay Range - End:
Northwestern Mutual pays on a geographic-specific salary structure and placement in the salary range for this position will be determined by a number of factors including the skills, education, training, credentials and experience of the candidate; the scope, complexity as well as the cost of labor in the market; and other conditions of employment. At Northwestern Mutual, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. Please note that the salary range listed in the posting is the standard pay structure. Positions in certain locations (such as California) may provide an increase on the standard pay structure based on the location. Please click for additiona l information relating to location-based pay structures.
We are an equal opportunity/affirmative action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender identity or expression, sexual orientation, national origin, disability, age or status as a protected veteran, or any other characteristic protected by law.
If you work or would be working in California, Colorado, New York City, Washington or outside of a Corporate location, please click for information pertaining to compensation and benefits.
FIND YOUR FUTURE
We're excited about the potential people bring to Northwestern Mutual. You can grow your career here while enjoying first-class perks, benefits, and commitment to diversity and inclusion.
- Flexible work schedules
- Concierge service
- Comprehensive benefits
- Employee resource groups
EEO/AA Employer/Vets/Disability