Incident Response Analyst I

This is a fully remote position, open to applicants in Missouri.

📋 Description

• Manage and analyze security alerts, events, and notifications comprehensively across endpoint, email, identity, and network telemetry.

• Escalate verified or suspected incidents to the DFIR team based on established criteria.

• Examine reported and identified phishing attempts and malicious emails.

• Record investigation procedures, findings, and conclusions in the case management system.

• Implement approved containment measures, including IOC blocking and host isolation.

• Recognize opportunities for detection tuning and automation.

• Assist in reviewing security configurations on Centene's production information systems and networks.

• Aid in the prevention and resolution of security incidents and the initiation of incident response procedures.

• Support access authorization reviews and validation of access controls.

• Contribute to the development of automated scripts, response playbooks, and programmed responses.

• Collaborate with Information Security Architects, Engineers, and other stakeholders involved in software or hardware.

• Integrate third-party attack monitoring and threat reporting services into internal CIRT communication systems.

• Support organization-wide remediation initiatives, leadership updates, and reporting tasks.

• Carry out additional responsibilities as assigned and adhere to policies and standards.

⛳️ Requirements

• Must possess the authorization to work in the U.S. without requiring employment-based visa sponsorship, now or in the future.

• Bachelor’s degree in a quantitative or business-related field (e.g., statistics, mathematics, engineering, computer science) with 0–2 years of relevant experience, or equivalent experience, or completion of a Centene-sponsored emerging talent program.

• Understanding of networking fundamentals, including TCP/IP, DNS, and HTTP.

• Familiarity with network and infrastructure technologies, such as routers, switches, and firewalls.

• Basic knowledge of Windows and Linux operating system principles.

• Experience in log analysis and investigation of security incidents.

• Awareness of indicators of compromise (IOCs) and the tactics, techniques, and procedures (TTPs) used by threat actors.

• CompTIA Security+, Microsoft SC-200, AWS Certified Cloud Practitioner, or ISC2 CC certifications are preferred, but not mandatory.

• Entry-level capability to identify fundamental issues and procedural inconsistencies, gather data, establish facts, and draw accurate conclusions.

🏝️ Benefits

• Competitive salary.

• Health insurance coverage.

• 401K retirement plan.

• Stock purchase options.

• Tuition reimbursement support.

• Paid time off in addition to holidays.

• Flexible work arrangements, including remote, hybrid, field, or office schedules.

• Additional incentive options may be included in total compensation.

• Equal opportunity employer dedicated to fostering diversity.