At a Glance
- Tasks: Join our Incident Response team to monitor and respond to security incidents.
- Company: Fisher Investments prioritizes clients with unmatched service and a personalized investment approach.
- Benefits: Enjoy 28 days of leave, top-tier health plans, and a gym subsidy.
- Why this job: Be part of a growing team that values innovation and collaboration in cybersecurity.
- Qualifications: 5+ years in cybersecurity with experience in monitoring and response required.
- Other info: Remote work options available; we value diversity and equal opportunity.
The predicted salary is between 48000 - 72000 £ per year.
Fisher Investments is growing internationally and we are looking for an Information Security Response Specialist to bring their talent and experience to our team. You will guide future global growth through strategic solutions and new ideas, support our growing firm’s diverse departments by managing and participating in the security response process, identifying risks to our organization, and collaborating with Technology and Governance teams at an Enterprise level.
The Opportunity:
As an Information Security Response Specialist, you will oversee activities relating to the monitoring and response of security incidents. You will consume, research, triage and document security events and alerts as they are received. Supporting multiple security-related platforms, working with team members in Information Security, Technology, other internal departments and external customers/partners.
You will coordinate support for incident response efforts with application, system and networking teams. Working with IT infrastructure, security operations, security audit and end-user sources of information to ensure collection, correlation and reporting, and facilitation of corporate-wide information security events.
This role must display an in-depth understanding of response management, new trends and technologies related to IT security and compliance, and contribute to our security roadmap.
The Day-to-Day:
-
Work as part of a growing Incident Response team in both a response and threat hunting capacity
-
Monitor and respond to security events
-
Implement regular incident response and postmortem exercises, with a focus on creating measurable benchmarks to show progress
-
Stay current with and remain knowledgeable about new threats and IOCs and maintain working knowledge of advanced threat detection as the industry evolves
-
Analyze attacker tactics, techniques and procedures (TTPs) from security events across a large network of security devices and end-user systems
-
Participate in response training events with other members of the technology and security teams
-
Manage a response investigation from alert notification to log and system analyses
-
Develop automation and orchestration solutions to automate repetitive response tasks
-
Follow service level agreements (SLAs), metrics and business scorecard obligations for ticket handling of security incidents and events
-
Evaluate team procedures, and recommend updates to management
-
Review and recommend improved tool usage and workflow, and advanced threat detection methods to mature monitoring and response capabilities
Your Qualifications:
- 5+ years of cybersecurity experience (or 7 + years IT experience coupled with cybersecurity) with at least 2 years in security monitoring and response
- Working knowledge of adversary tactics, techniques and procedures (TTPs) and MITRE ATT&CK principles
- Experience improving monitoring and response capabilities at scale
- Experience translating complex technical concepts into business friendly language
- Experienced with one or more scripting languages (e.g., Python, PowerShell)
- Experience in Financial Services or other regulated industry with security as a top priority
- Deep skill set and understanding of the Microsoft stack
- PaaS experience including Azure and AWS
- SIEM Systems
- Security Automation and Orchestration Solutions
- Network analysis knowledge
- OSI model knowledge
Why Fisher Investments Europe:
The global Fisher organisation distinguishes itself by putting clients first, providing unmatched service, and taking a personalised approach to investing. You can feel confident knowing that we align with our clients’ best interests by using a simple and transparent fee structure and recognised European custodians.
It’s the people that make the Fisher purpose possible, and to help our employees meet their long-term goals, we offer an array of benefits, including:
- 100% paid premiums for our top-tier supplemental medical, dental and annual health screening plans for employees and their qualified dependents
- 28 days annual leave, with the ability to purchase up to 3 additional days per year, plus up to 8 paid holidays
- Enhanced maternity pay package with 16 weeks’ top up to full base pay for eligible employees
- $10,000 fertility, hormonal health and family-forming benefit
- A retirement pension plan, featuring a 9% company contribution of base pay with an additional company match of up to 5% of base pay on personal contributions
- Gym subsidy of up to £50 per month
- Employee Assistance Program and other emotional wellbeing services
- A collaborative working environment that practises ongoing training, educational support and employee appreciation events
Employees residing outside of the US will be eligible for the $10,000 equivalent in their local currency.
FISHER INVESTMENTS EUROPE IS AN EQUAL OPPORTUNITY EMPLOYER
Senior Information Security Response Specialist employer: Fisher Investments
Contact Detail:
Fisher Investments Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Senior Information Security Response Specialist
✨Tip Number 1
Familiarize yourself with the MITRE ATT&CK framework and adversary tactics, techniques, and procedures (TTPs). This knowledge will not only help you understand the current threat landscape but also demonstrate your expertise during interviews.
✨Tip Number 2
Stay updated on the latest trends in cybersecurity, especially regarding incident response and security monitoring. Engaging in relevant online communities or forums can provide insights and show your commitment to continuous learning.
✨Tip Number 3
Highlight any experience you have with automation and orchestration solutions in your discussions. Being able to automate repetitive tasks is a valuable skill that can set you apart from other candidates.
✨Tip Number 4
Prepare to discuss specific examples of how you've improved monitoring and response capabilities in previous roles. Concrete examples will illustrate your problem-solving skills and ability to contribute to the team effectively.
We think you need these skills to ace Senior Information Security Response Specialist
Some tips for your application 🫡
Understand the Role: Before applying, make sure you fully understand the responsibilities and qualifications required for the Senior Information Security Response Specialist position. Tailor your application to highlight relevant experience in cybersecurity and incident response.
Highlight Relevant Experience: In your CV and cover letter, emphasize your 5+ years of cybersecurity experience, particularly any roles involving security monitoring and response. Mention specific tools and technologies you've worked with, such as SIEM systems or scripting languages like Python.
Showcase Your Skills: Demonstrate your understanding of adversary tactics and the MITRE ATT&CK framework. Provide examples of how you've improved monitoring and response capabilities in previous roles, and be prepared to discuss these in detail during an interview.
Craft a Compelling Cover Letter: Write a cover letter that not only outlines your qualifications but also conveys your passion for information security. Discuss how your skills align with Fisher Investments' goals and how you can contribute to their security roadmap.
How to prepare for a job interview at Fisher Investments
✨Showcase Your Cybersecurity Experience
Make sure to highlight your 5+ years of cybersecurity experience, especially your time spent in security monitoring and response. Be prepared to discuss specific incidents you've managed and the outcomes of those situations.
✨Demonstrate Knowledge of TTPs
Familiarize yourself with adversary tactics, techniques, and procedures (TTPs) and MITRE ATT&CK principles. Be ready to explain how you have applied this knowledge in past roles to improve security measures.
✨Discuss Automation Solutions
Talk about any experience you have with developing automation and orchestration solutions. Provide examples of how these solutions have helped streamline incident response tasks in your previous positions.
✨Translate Technical Concepts
Prepare to demonstrate your ability to translate complex technical concepts into business-friendly language. This skill is crucial for collaborating with diverse departments and ensuring everyone understands security protocols.