Sr Security Analyst, Incident Response

$120,000 - $120,000/Yr

Bath & Body Works - Columbus, OH

Full-time - Mid Level

Remote - Columbus, OH

Health and Personal Care Retailers

About the position

The Senior Incident Response Analyst at Bath & Body Works will lead the Detection, Response, and Remediation functions to ensure the security of the company's global operations. This role involves monitoring and analyzing security events, developing strategic detection and prevention approaches, managing security platforms, and providing recommendations for improvements. Strong communication skills and the ability to remain calm under pressure are essential for success in this role.

Responsibilities

• Independently monitor and analyze security systems, including IDS/IPS, antivirus software, and SIEM tools for unusual activity.
• Conduct in-depth analysis of suspected security incidents, determining the nature and scope of incidents by analyzing logs, network traffic, and system data.
• Prepare comprehensive incident reports for both technical and non-technical audiences, documenting the incident timeline and making recommendations for future prevention.
• Lead efforts with other teams to restore normal operations after incidents and implement changes to prevent similar incidents, including patching software vulnerabilities and adjusting security settings.
• Manage, fine-tune, and automate detection rule sets in the organization's security stack, with a strong emphasis on experience with Microsoft Sentinel and Google Chronicle.

Requirements

• 5+ years prior incident handling experience.
• Understanding of security controls and their use in detection and response.
• Knowledge of basic cryptography (TLS), common network protocols, edge routing technologies, firewall/IDS/IPS solutions, SIEM, EDR/XDR.
• Bachelor's Degree in Information Technology/Information Security or equivalent experience in technology.

Nice-to-haves

• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Intrusion Analyst (GCIA)
• GIAC Network Forensic Analyst (GNFA)
• GIAC Reverse Engineering Malware (GREM)
• CompTIA: Security+
• CompTIA: CySA+ (Cybersecurity Analyst)
• Cisco: CCNA Cyber Ops
• EC-Council: Certified Ethical Hacker (CEH)

Benefits

• No cost mental health and well-being program
• Health coverage with a variety of plans to choose from
• Flexible and affordable saving programs
• Paid time off
• Merchandise discount