H-E-B

Responsibilities

H-E-B is a leading innovator in technology and continue to invest in our customers' digital experience. Our Digital Technology Partners collaborate to design, construct, implement, and support technology solutions, using the best available technologies to deliver modern engagement, reliability, and scalability to meet customer needs.

As a Senior Security Ops Center Analyst, you'll monitor / assign resources in near-real time to ensure efficient SOC daily operations. You may coach and mentor.

Once you're eligible, you'll become an Owner in the company, so we're looking for commitment, hard work, and focus on quality and Customer service. 'Partner-owned' means our most important resources--People--drive the innovation, growth, and success that make H-E-B The Greatest Omnichannel Retailing Company.

Do you have a:

HEART FOR PEOPLE... willingness to mentor?

HEAD FOR BUSINESS... understanding that digital security issues are a balance of security and business needs?

PASSION FOR RESULTS... drive to support maximizing value and effectiveness of our SOC tools?

What is the work?

Analytics / Information Technology:

• Responds to tickets and security alerts from various SOC systems. Mentor junior security analysts with investigating / creating tickets.
• Senior point of contact for escalation and advanced investigation of incoming events. Primarily responsible for investigation of 'declared incidents' response procedures.
• Basic forensics analysis of system logs (examples Syslog, Event Viewer / shadow, etc.)
• Serves as escalation point. Joins conference calls on 'declared incidents' response when SOC representation is needed.
• Recommends / escalates proper mitigations for containment or recovery to Manager.
• Documents activities related to 'declared incidents' response include investigations in case management, meeting minutes or after-action reports.
• Provides junior analysts with consistent documentation and procedures such as runbooks or playbooks.
• Provide mentoring and on-job training to junior SOC analysts.
• Contribute detection engineering use-cases / new alerts based on experience from investigations.
• Maintain awareness of current threats, industry trends, and emerging technologies that drive security innovation for H-E-B.
• Develop forensic analysis, procedure-based methods as needed.
• Demonstrate high level of communication skills, both verbal and written with collaborative mindset

What is your background?

• A bachelor's degree or understanding of security principles and concepts. A combination of experience / certifications is necessary for this position. Examples, CompTIA Network+ or Security+ or CISSP or SANS certification
• 5+ years of experience in enterprise digital security.
• Prior experience as a system administrator / engineer in networked environments for Linux or Windows (MS Active Directory or LDAP)
• Experience designing digital security systems or penetration testing.
• Analyzing advance threat techniques beyond standard alerts and pivoting investigations (MITRE ATT&CK, CAR, diamond-model etc.)
• Experience with security tooling such as Security information and event management (SIEM) systems, Endpoint Detection and Response (EDR), Intrusion Detection and Prevention System (IDPS)
• Analysis of networking packet capture (PCAP) or applications / OS processes on servers / workstations in virtual / cloud environments

Do you have what it takes to be an H-E-B Senior Security Ops Center Analyst?

• Strong working knowledge of security information event management (SIEM) and TCP / IP, networking, routing, and switching.
• Working knowledge of strong authentication, end point security, Internet policy enforcement, firewalls, web content filtering, database activity monitoring (DAM), public key infrastructure (PKI), data loss prevention (DLP), identity and access management (IAM) solutions, and NIST, PCI, and HIPAA
• Strong troubleshooting, reasoning, and problem-solving skills
• Strong verbal / written communication skills
• Time management and organization skills
• Ability to communicate digital security matters clearly and tactfully at all levels.
• Ability to write clear, concise technical documentation.
• Ability to speak / write fluently in English.
• Ability to professionally handle confidential information.
• Ability to work autonomously and as a team player.

Can you...

• Function in a fast-paced, retail, office environment
• Work outside regular business hours as required.

SEC3232

JDSECURITY