Sr. Incident Analyst

Profile

Texas, United States of America

Job Family Group:

Information Technology (IT)

Worker Type:

Regular

Posting Start Date:

June 10, 2022

Business unit:

Projects and Technology

Experience Level:

Experienced Professionals

Job Description:

Where you fit

The purpose of the IRM Function is to ensure (as a second line of assurance, with Internal Audit providing the Third Line of Assurance) that Shell is addressing Information Risks in an effective and efficient manner, commensurate with Shell risk appetite, and being seen as an industry leader among peers and key suppliers of security services.

The Information Risk posture of Shell includes a wide variety of potential business impacts, such as HSSE impacts, production loss, financial and maintenance operations loss, loss of Most Confidential bidding data.

As part of the Cyber Defence capability, the global Incident Response team focuses on responding to security incidents performing detailed investigation and limiting Business impact as much as possible.

What’s the role?

As an Incident Analyst you are responsible for executing the Shell IRM Incident Management process:


Operate and improve Shell Incident Response processes
Perform investigations and execute response activities on potentially IRM (major) breaches
Provide triage, data acquisition and advice on all incidents to rapidly diagnose problems and identify immediate treatment.
Develop and mature use of tools to support incident investigations, harvesting and analysis.
Drive process improvements in incidents, forensics across all supplier teams.
Report on incidents to the IRM function.


Accountabilities:


Execute the Shell IRM Incident Management process
Serve as an Incident manager working with IT and the business stakeholders to rapidly and effectively resolve information security incidents.
Operate and support Shell Incident Response process
Provide triage, data acquisition and advice on all incidents to rapidly diagnose problems and identify immediate treatment.
Develop and mature use of tools to support incident investigations, harvesting and analysis.
Drive improvements in incidents, forensics and E-Discovery across all supplier teams.
Document incidents in Collective and report to the IRM function.
Operate the scanning infrastructure to detect if compromised have occurred in the Shell estate.

Deliver Incident investigations:
Serve as an Incident manager working with a team of Incident Response/forensic staff to rapidly and effectively resolve information security incidents.
Investigate and find root causes of incidents and document the lessons learned.
Track and report status and drive rapid resolution of incidents and situations involving IRM controls.
Liaise with authorities and support investigation and prosecutions where relevant.
Follow-up on detections resulting from scanning activities searching for indicators of compromise.


Common Tool Support


Maintain and support the toolset used for all cross-process IRM activities.
Help develop and deploy new IRM tools in ITSO
Support proof of concept deployments and document results


What we need from you


Must have legal authorization to work in the US on a full-time basis for anyone other than current employer.
5-10 years’ experience in Information Security areas such as Risk management, Incident Response, penetration testing
Is a knowledgeable, creative and responsible IT security professional.
Has excellent analytical skills and appreciates a technical challenge.
Has a good technical understanding of and experience with IT networks, infrastructure and applications.
Has a passion for IT technology and is able to share that with other members of the team.
Has good written and verbal communication skills and provides well-informed advice.
Produces high quality deliverables in terms of both content and presentation. Examples of deliverables include: reports, presentations and reasoned arguments.
Carries out assignments and projects, alone or as part of a team, applying knowledge, skills, and experience.
Demonstrates an understanding of the issues of interest to Shell and proposes viable solutions within the scope of own expertise, taking into account the needs of those affected.
Maintains knowledge and experience of current practice within own area of expertise and is aware of current developments within own area of expertise.
Develops and maintains knowledge of Cyber security and maintains an awareness of current developments.
Promotes transfer of knowledge and awareness of information security to those in related areas.
Is comfortable working virtually.
Demonstrable experience performing incident response and IT forensic investigations.
Excellent verbal and written communication skills and the ability to interact professionally with a diverse group, executives, managers, and subject matter experts.
Incident Management and IT forensics skills, with the ability to communicate effectively at all levels of the Organisation.
Strong interpersonal skills, with the ability to network across boundaries.
Pro-active and self-motivated, committed to achieving deadlines and results.
Experience in IT investigations and forensic processes.
Proven ability to work in teams on large scale investigations.
Sound understanding of IT infrastructure and management processes.
Demonstrated evidence of Enterprise First values and behaviours.
Has relevant certifications such as, CISSP, SANS and preferably:
GCIH: GIAC Certified Incident Handler
GCIA: GIAC Certified Intrusion Analyst
GCFA: GIAC Certified Forensic Analyst
GREM: GIAC Reverse Engineering Malware
Offensive Security Certified Professional – OSCP Certification
Offensive Security Wireless Professional – OSWP Certification
Offensive Security Certified Expert – OSCE Certification
Offensive Security Exploitation Expert – OSEE Certification
Offensive Security Web Expert – OSWE Certification


COMPANY DESCRIPTION

An innovative place to work

There’s never been a more exciting time to work at Shell. Everyone here is helping solve one of the biggest challenges facing the world today: bringing the benefits of energy to everyone on the planet, whilst managing the risks of climate change.

Join us and you’ll add your talent and imagination to a business with the power to shape the future – whether by investing in renewables, exploring new ways to store energy or developing technology that helps the world to use energy more efficiently.

An inclusive place to work

To power progress together, we need to attract and develop the brightest minds and make sure every voice is heard. Here are just some of the ways we’re nurturing an inclusive environment – one where you can express your ideas, extend your skills and reach your potential…


We’re creating a space where people with disabilities can excel through transparent recruitment process, workplace adjustments and ongoing support in their roles. Feel free to let us know about your circumstances when you apply, and we’ll take it from there.
We’re closing the gender gap – whether that’s through action on equal pay or by enabling more women to reach senior roles in engineering and technology.
We’re striving to be a pioneer of an inclusive and diverse workplace, promoting equality for employees regardless of sexual orientation or gender identity.
We consider ourselves a flexible employer and want to support you finding the right balance. We encourage you to discuss this with us in your application.


A rewarding place to work

Combine our creative, collaborative environment and global operations with an impressive range of benefits and joining Shell becomes an inspired career choice.

We’re huge advocates for career development. We’ll encourage you to try new roles and experience new settings. By pushing people to reach their potential, we frequently help them find skills they never knew they had, or make career moves they never thought possible.

-

DISCLAIMER:

Please note: We occasionally amend or withdraw Shell jobs and reserve the right to do so at any time, including prior to the advertised closing date. Before applying, you are advised to read our data protection policy. This policy describes the processing that may be associated with your personal data and informs you that your personal data may be transferred to Royal Dutch/Shell Group companies around the world. The Shell Group and its approved recruitment consultants will never ask you for a fee to process or consider your application for a career with Shell. Anyone who demands such a fee is not an authorised Shell representative and you are strongly advised to refuse any such demand. Shell participates in E-Verify. All qualified applicants will receive consideration for employment without regard to race, color, sex, national origin, age, religion, disability, sexual orientation, gender identity, protected veteran status, citizenship, genetic information or other protected status under federal, state or local laws. Shell is an Equal Opportunity Employer - Minorities/Females/Veterans/Disability. As a US Federal Contractor, hiring selections are subject to periodic audit review and documentation of your selections should be maintained for a period of three calendar years. It is the policy of Shell in the U.S. (“Shell”) to provide equal opportunity to all individuals, employees and all qualified applicants for employment consistent with employment requirements and qualifications. Shell prohibits discrimination based on race, color, sex, national origin, age, religion, disability, sexual orientation, gender identity, veteran status, citizenship, genetic information, or other protected status under federal, state or local laws. All employees are expected to support this policy and contribute to an environment of equal opportunity. If you need an accommodation for a disability during the resourcing process, please speak with an HR representative.

Company info

Sign Up Now - MiamiCrossing.com