Cybersecurity Analyst - CSIRT

$67,800 - $122,000/Yr

Target - Minneapolis, MN

Full-time - Mid Level

Minneapolis, MN

10,001+ employees

General Merchandise Retailers

About the position

As a Cybersecurity Analyst at Target, you will play a crucial role in detecting and assessing cybersecurity events and incidents within a 24x7 Cyber Fusion Center (CFC) environment. This position involves collaborating with a team of skilled analysts to address complex cybersecurity challenges, implementing new processes for continuous improvement, and monitoring security events to mitigate potential threats. Your expertise will contribute to maintaining a secure environment and ensuring the safety of Target's operations.

Responsibilities

• Detect and assess cybersecurity events and incidents across the Target environment.
• Collaborate with a team of analysts to address complex cybersecurity problems.
• Implement new processes and procedures for continuous improvement in monitoring and detection capabilities.
• Monitor SIEM and logging environments for security events and alerts.
• Work with the Cyber Threat Intel team to maintain awareness of the global threat landscape.
• Assist with triaging service requests from customers and internal teams.
• Escalate cybersecurity events according to Target's Cyber Security Incident Response Plan.
• Assist with containment of threats and remediation during or after an incident.
• Participate in Cyber Hunt activities as directed by Incident Commanders.
• Document event analysis and write comprehensive reports of incident investigations.

Requirements

• Bachelor's degree or equivalent experience.
• 2+ years of experience in a Security Operations Center or Cyber Security Incident Response Team.
• Security certification (e.g., Security+, GCIA, GCIH, CISSP).
• Experience managing cases with enterprise SOAR, SIEM, or Incident Management systems.
• Experience supporting network and host investigations.
• Demonstrated analytical expertise and attention to detail.
• Excellent critical thinking, logic, and adaptive learning skills.
• Excellent written and oral communication skills.
• Thorough understanding of fundamental security and network concepts (Operating systems, intrusion/detection, TCP/IP, ports, etc.).
• Experience with host and network-based security tools preferred.
• Experience with network monitoring in a SOC environment preferred.

Nice-to-haves

• Experience with enterprise SOAR systems.
• Familiarity with incident management systems.

Benefits

• Paid holidays
• Disability insurance
• Health insurance
• Dental insurance
• Vision insurance
• Employee discount
• Life insurance
• Paid sick time