Cyber Incident Response Analyst/Specialist (HYBRID)
About the position
At Equitable, we help clients secure their financial well-being so they can pursue long and fulfilling lives - a mission we’ve honed since 1859.
Equitable is looking for a Cyber Incident Response Analyst/Specialist, you will work closely with the Cyber Crisis/Incident Response Manager to execute incident response activities, maintain runbooks, and support organizational readiness. This role is hands-on, focusing on technical analysis, coordination during cyber events, and assisting with tabletop exercises. You will collaborate across business units to ensure timely and effective response to cyber threats.
The Cyber Incident Response Analyst/Specialist is responsible for supporting incident management processes, maintaining documentation, and assisting in the development of response strategies. This role requires strong technical skills, attention to detail, and the ability to work under pressure during high-impact events.
Responsibilities
• Assist in triaging and analyzing security alerts and incidents.
• Execute containment and remediation steps under the guidance of the Incident Response Manager.
• Document incident details and contribute to post-incident reviews.
• Update and maintain incident response runbooks and playbooks.
• Ensure documentation reflects current processes and threat intelligence.
• Support the planning and execution of annual cyber crisis tabletop exercises.
• Assist in gathering metrics and lessons learned from exercises and incidents.
• Communicate with Lines of Business during incidents to gather information and provide updates.
• Collaborate with IT and security teams to implement response actions.
• Prepare incident summaries and reports for internal stakeholders.
• Ensure adherence to regulatory and organizational requirements.
• Document and track remediation of after-action reports.
Requirements
• Bachelor’s degree in Cybersecurity, Information Technology, or related field OR 3+ years of relevant experience.
• 2+ years of experience in cybersecurity operations or incident response.
• Familiarity with SIEM tools, endpoint detection, and forensic techniques.
• Understanding of frameworks such as NIST CSF and ISO 27001.
• Established analytical and communication skills.
• Knowledge of concept and principles of agile methodology; ability to apply appropriate agile approaches in the processes of software development and delivery.
• Knowledge of practices and policies governing disclosure of information about the organization, its business activities, and employees; ability to apply this knowledge appropriately to diverse situations.
• Knowledge of the processes, tools and techniques of information security management; ability to deploy and monitor information security systems, while detecting, controlling and preventing violations of IT security.
Nice-to-haves
• Experience in financial services or other regulated industries.
• Certifications such as GCIH, GCFA, or Security+.
• Knowledge of scripting for automation (Python, PowerShell).
Benefits
• Equitable provides compensation to reward performance with base salary increases, spot bonuses, and short-term incentive compensation opportunities.
• For eligible employees, Equitable provides a full range of benefits. This includes medical, dental, vision, a 401(k) plan, and paid time off.
Apply Now
Apply Now
At Equitable, we help clients secure their financial well-being so they can pursue long and fulfilling lives - a mission we’ve honed since 1859.
Equitable is looking for a Cyber Incident Response Analyst/Specialist, you will work closely with the Cyber Crisis/Incident Response Manager to execute incident response activities, maintain runbooks, and support organizational readiness. This role is hands-on, focusing on technical analysis, coordination during cyber events, and assisting with tabletop exercises. You will collaborate across business units to ensure timely and effective response to cyber threats.
The Cyber Incident Response Analyst/Specialist is responsible for supporting incident management processes, maintaining documentation, and assisting in the development of response strategies. This role requires strong technical skills, attention to detail, and the ability to work under pressure during high-impact events.
Responsibilities
• Assist in triaging and analyzing security alerts and incidents.
• Execute containment and remediation steps under the guidance of the Incident Response Manager.
• Document incident details and contribute to post-incident reviews.
• Update and maintain incident response runbooks and playbooks.
• Ensure documentation reflects current processes and threat intelligence.
• Support the planning and execution of annual cyber crisis tabletop exercises.
• Assist in gathering metrics and lessons learned from exercises and incidents.
• Communicate with Lines of Business during incidents to gather information and provide updates.
• Collaborate with IT and security teams to implement response actions.
• Prepare incident summaries and reports for internal stakeholders.
• Ensure adherence to regulatory and organizational requirements.
• Document and track remediation of after-action reports.
Requirements
• Bachelor’s degree in Cybersecurity, Information Technology, or related field OR 3+ years of relevant experience.
• 2+ years of experience in cybersecurity operations or incident response.
• Familiarity with SIEM tools, endpoint detection, and forensic techniques.
• Understanding of frameworks such as NIST CSF and ISO 27001.
• Established analytical and communication skills.
• Knowledge of concept and principles of agile methodology; ability to apply appropriate agile approaches in the processes of software development and delivery.
• Knowledge of practices and policies governing disclosure of information about the organization, its business activities, and employees; ability to apply this knowledge appropriately to diverse situations.
• Knowledge of the processes, tools and techniques of information security management; ability to deploy and monitor information security systems, while detecting, controlling and preventing violations of IT security.
Nice-to-haves
• Experience in financial services or other regulated industries.
• Certifications such as GCIH, GCFA, or Security+.
• Knowledge of scripting for automation (Python, PowerShell).
Benefits
• Equitable provides compensation to reward performance with base salary increases, spot bonuses, and short-term incentive compensation opportunities.
• For eligible employees, Equitable provides a full range of benefits. This includes medical, dental, vision, a 401(k) plan, and paid time off.
Apply Now
Apply Now