Women of Color in Pharma

Cyber Incident Response Analyst

Merck
Branchburg, New Jersey, United States
5 days ago

Description

Job Description

New hires in office-based roles in the US & Puerto Rico will be required, subject to applicable law, to demonstrate that they have been fully vaccinated for COVID-19 or qualify for a medical or religious exemption to this vaccination requirement that can be accommodated without an undue burden to the operation. However, subject to applicable law, employees working in roles that the Company determines require routine collaboration with external stakeholders, such as employees in health services, customer facing commercial, or research based roles, will be required to be fully vaccinated as a condition of employment.

Our IT team operates as a business partner proposing ideas and innovative solutions that enable new organizational capabilities. We collaborate internationally to deliver the services and solutions that help everyone to be more productive and enable innovation.

We partner with the business to ensure we maintain our company's values and high ethical standards, comply with the law, protect our people and enhance our reputation. We strive to foster an environment that is inspiring, supportive and diverse.

Position Description

Summary:

The Triage Analyst supports our companies' Incident Response by responding to escalated alerts and monitoring alerts during heavy volume events. This position conducts more in-depth analyses of security incidents with the specific ability to identify Indicators of Compromise, perform intrusion scope and root cause analyses and implement triaging protocols to mitigate potential damage to our companies' cyber ecosystem.

Primary Responsibilities:
  • Develops and updates procedures, and configure tools for Monitoring Analysts consumption
  • Escalates cyber security events according to our companies' playbook and standard operation procedures (SOPs)
  • Performs additional analysis of escalations from Monitoring Analysts and conduct case review
  • Assists with containment of threats and remediation of environment during or after an incident
  • Escalates high or critical severity level incidents to Incident Investigators
  • Consumes threat intelligence and disseminate findings to relevant parties
  • Conducts hunting activities based on internal and external threat intelligence
  • Performs triage of service requests from customers and internal teams


Education Minimum Requirement:
  • High School Diploma or related work experience


Required Experience and Skills:
  • Experience using event escalation and reporting procedures
  • Ability to demonstrate analytical expertise, close attention to detail, excellent critical thinking, logic, and solution orientation and to learn and adapt quickly
  • Understanding TCP/IP communications & knowledge of how common protocols and applications work at the network level, including DNS, HTTP, and SMB
  • Knowledge of how common protocols and applications work at the network level, including DNS, HTTP, and SMB
  • Knowledge of how the Windows file system and registry function
  • Experience managing cases with enterprise SIEM systems
  • Experience with network monitoring in a SOC environment
  • Must be able to work various shifts as needed and work in a 24/7 call environment
  • 7 am to 3 pm
  • 3 pm to 11pm


Preferred Experience and Skills:
  • BA/BS in Engineering, Computer Science, Information Security, or Information Systems or related work experience preferred
  • Experience with Splunk, OSSEC and McAfee security products
  • Experience conducting forensic media analysis and log file analysis
  • Experience supporting incident investigations
  • Experience working in a 24/7 SOC environment
  • Security certifications (e.g. Security+, Network+, CEH, SANS etc.)


Our Support Functions deliver services and makes recommendations about ways to enhance our workplace and the experience of working at our organization. Our Support Functions include HR, Finance, Information Technology, Legal, Procurement, Administration, Facilities and Security.

Who we are ...

We are known as Merck & Co., Inc., Kenilworth, New Jersey, USA in the United States and Canada and MSD everywhere else. For more than a century, we have been inventing for life, bringing forward medicines and vaccines for many of the world's most challenging diseases. Today, our company continues to be at the forefront of research to deliver innovative health solutions and advance the prevention and treatment of diseases that threaten people and animals around the world.

What we look for ...

Imagine getting up in the morning for a job as important as helping to save and improve lives around the world. Here, you have that opportunity. You can put your empathy, creativity, digital mastery, or scientific genius to work in collaboration with a diverse group of colleagues who pursue and bring hope to countless people who are battling some of the most challenging diseases of our time. Our team is constantly evolving, so if you are among the intellectually curious, join us-and start making your impact today.

NOTICE FOR INTERNAL APPLICANTS

In accordance with Managers' Policy - Job Posting and Employee Placement, all employees subject to this policy are required to have a minimum of twelve (12) months of service in current position prior to applying for open positions.

If you have been offered a separation benefits package, but have not yet reached your separation date and are offered a position within the salary and geographical parameters as set forth in the Summary Plan Description (SPD) of your separation package, then you are no longer eligible for your separation benefits package. To discuss in more detail, please contact your HRBP or Talent Acquisition Advisor.

Current Employees apply HERE

Current Contingent Workers apply HERE

US and Puerto Rico Residents Only:

Our company is committed to inclusion, ensuring that candidates can engage in a hiring process that exhibits their true capabilities. Please click here if you need an accommodation during the application or hiring process.

For more information about personal rights under Equal Employment Opportunity, visit:

EEOC Poster

EEOC GINA Supplement

OFCCP EEO Supplement

Pay Transparency Nondiscrimination

We are proud to be a company that embraces the value of bringing diverse, talented, and committed people together. The fastest way to breakthrough innovation is when diverse ideas come together in an inclusive environment. We encourage our colleagues to respectfully challenge one another's thinking and approach problems collectively. We are an equal opportunity employer, committed to fostering an inclusive and diverse workplace.

Search Firm Representatives Please Read Carefully
Merck & Co., Inc., Rahway, NJ, USA, also known as Merck Sharp & Dohme LLC, Rahway, NJ, USA, does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for this position will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails.

Employee Status:
Regular

Relocation:
No relocation

VISA Sponsorship:
No

Travel Requirements:
10%

Flexible Work Arrangements:
Not Specified

Shift:
1st - Day, 2nd - Evening, 3rd - Night

Valid Driving License:

Hazardous Material(s):

Number of Openings:
1

Requisition ID:R179997

Job Information

  • Job ID: 63295013
  • Location:
    Branchburg, New Jersey, United States
  • Position Title: Cyber Incident Response Analyst
  • Company Name For Job: Merck
  • Job Function: Other
  • Job Type: Full-Time
Jobs You May Like