Senior Information Security Incident Response Analyst at Dassault Systèmes

Job description

Location : This is a hybrid remote/in-office role. Medidata follows a hybrid office policy in which employees who are hired for an in-person position are expected to work on site a certain number of days per week following Company policy. About our Company : Medidata is powering smarter treatments and healthier people through digital solutions to support clinical trials. Celebrating over 25 years of ground-breaking technological innovation across more than 38,000 trials and 12 million patients, Medidata offers industry-leading expertise, analytics-powered insights, and one of the largest clinical trial data sets in the industry. More than 1 million registered users across approximately 2,300 customers trust Medidata's seamless, end-to-end platform to improve patient experiences, accelerate clinical breakthroughs, and bring therapies to market faster. A Dassault Systèmes brand (Euronext Paris: FR0014003TT8, DSY.PA), Medidata is headquartered in New York City and has been recognized as a Leader by Everest Group and IDC. Discover more at www.medidata.com . Listen to our latest podcast, from Dreamers to Disruptors , and follow us at @Medidata. About the Team: The Senior Information Security Incident Response Analyst is focused on being the liaison between the information security, quality management and production support teams, and will be the primary support for information security incidents, vulnerabilities, and threat advisories. The analyst will be responsible for securing the clinical cloud and its data from threats by ensuring the hosting environments are in compliance with industry’s standards and company’s security policies. You will support the Information Security management as a technical advisor and an agent of change. Responsibilities : • Log and track information security events and alerts detected by monitoring tools and third-party services • Assess the validity and impact of alerts • Recommend remediation plan and risk acceptance to management teams • Maintain third-party portals and tools • Investigate whether a breach of security occurred as a result of a cyber security incident • Provide detailed root-cause analysis reports • Provide primary support and analysis throughout the life-cycle of a security incident. • Continually assess and track industry security vulnerabilities and threat advisories • Assess impact to production systems as well as support tools and create security impact reports • Coordinate with multiple teams to remediate or accept potential vulnerabilities • Maintain accurate inventory of security keys and certificates • Manage the rotation of key and certificates • Ensure PKI infrastructure complies with policies and standards • Maintain audit records of access and changes to all security assets within Service Delivery • Assist in the engineering, implementation, and monitoring security control measures for the protection of computer systems, networks and information systems • Participate in an on-call rotation and work outside of normal business hours Qualifications: • Bachelor's Degree with 5+ Related Equivalent Experience • Security Certification desired; and one will be required within one year of hire • ECIH or GCIH preferred • Well-versed in the Incident Response process • Solid understanding of Cloud Infrastructure and cloud-specific threats (AWS a plus) • Foundational understanding of Computer Forensics • Working knowledge of Evidence Custodianship • Experience writing automation scripts (Python a plus) and designing automation workflows • Strong documentation and process development skills • Able to clear a background check suitable for working in a FedRamp regulated environment. • Ability to operationalize best information security practices (ISO, NIST, HIPPA, PCI DSS) • Ability to learn in a fast pace and utilize this knowledge to advance DFIR and CTI programs • Ability to take on complex problems creatively • Outstanding oral and written communication skills The salary range posted below refers only to positions that will be physically based in New York City. As with all roles, Medidata sets ranges based on a number of factors including function, level, candidate expertise and experience, and geographic location. Pay ranges for candidates in locations other than New York City, may differ based on the local market data in that region. The base salary pay range for this position physically based in New York Metropark area is $96,000- $128,000. The salary range for positions that will be physically based in all other locations within the United States is $85,500-$114,000. Base pay is one part of the Total Rewards that Medidata provides to compensate and recognize employees for their work. Most sales positions are eligible for a commission on the terms of applicable plan documents, and many of Medidata's non-sales positions are eligible for annual bonuses. Medidata believes that benefits should connect you to the support you need when it matters most and provides best-in-class benefits, including medical, dental, life and disability insurance; 401(k) matching; flexible paid time off; and 10 paid holidays per year. Equal Employment Opportunity : In order to provide equal employment and advancement opportunities to all individuals, employment decisions at Medidata are based on merit, qualifications and abilities. Medidata is committed to a policy of non-discrimination and equal opportunity for all employees and qualified applicants without regard to race, color, religion, gender, sex (including pregnancy, childbirth or medical or common conditions related to pregnancy or childbirth), sexual orientation, gender identity, gender expression, marital status, familial status, national origin, ancestry, age, disability, veteran status, military service, application for military service, genetic information, receipt of free medical care, or any other characteristic protected under applicable law. Medidata will make reasonable accommodations for qualified individuals with known disabilities, in accordance with applicable law. Applications will be accepted on an ongoing basis until the position is filled. #LI-Hybrid #LI-EM1 Inclusion statement In order to provide equal employment and advancement opportunities to all individuals, employment decisions at 3DS are based on merit, qualifications and abilities. 3DS is committed to a policy of non-discrimination and equal opportunity for all employees and qualified applicants without regard to race, color, religion, gender, sex (including pregnancy, childbirth or medical or common conditions related to pregnancy or childbirth), sexual orientation, gender identity, gender expression, marital status, familial status, national origin, ancestry, age (40 and above), disability, veteran status, military service, application for military service, genetic information, receipt of free medical care, or any other characteristic protected under applicable law. 3DS will make reasonable accommodations for qualified individuals with known disabilities, in accordance with applicable law. Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable state laws and local ordinances. We are committed to fair employment practices and will evaluate all candidates based on their qualifications, regardless of past arrest or conviction history. Salary Pay Transparency Compensation for the role will be commensurate with experience. The total expected compensation range will be: • NY/NJ : $96000-$128000 • Remote : $85500-$114000 representing the base salary (or annualized salary based on estimated hourly compensation) and target bonus.

Requirements

Must-haves

Location : This is a hybrid remote/in-office role.
Medidata follows a hybrid office policy in which employees who are hired for an in-person position are expected to work on site a certain number of days per week following Company policy.
Log and track information security events and alerts detected by monitoring tools and third-party services
Assess the validity and impact of alerts
Recommend remediation plan and risk acceptance to management teams
Maintain third-party portals and tools
Investigate whether a breach of security occurred as a result of a cyber security incident
Provide detailed root-cause analysis reports
Provide primary support and analysis throughout the life-cycle of a security incident.
Continually assess and track industry security vulnerabilities and threat advisories
Assess impact to production systems as well as support tools and create security impact reports
Coordinate with multiple teams to remediate or accept potential vulnerabilities
Maintain accurate inventory of security keys and certificates
Manage the rotation of key and certificates
Ensure PKI infrastructure complies with policies and standards
Maintain audit records of access and changes to all security assets within Service Delivery
Assist in the engineering, implementation, and monitoring security control measures for the protection of computer systems, networks and information systems
Participate in an on-call rotation and work outside of normal business hours
Bachelor's Degree with 5+ Related Equivalent Experience
Security Certification desired; and one will be required within one year of hire

Nice-to-haves

ECIH or GCIH preferred
Solid understanding of Cloud Infrastructure and cloud-specific threats (AWS a plus)
Experience writing automation scripts (Python a plus) and designing automation workflows
representing the base salary (or annualized salary based on estimated hourly compensation) and target bonus.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awspython

Platform: careers-html
Effort: medium

Benefits

Benefits detected in the listing.

Dental

401(K)

Pto

Paid Time Off