Information Security Analyst

The posting, as Gibson Dunn wrote it

Gibson Dunn is a leading global law firm, advising clients on significant transactions and disputes. Our exceptional teams craft and deploy creative legal strategies that are meticulously tailored to every matter, however complex or high stakes. The firm’s work is distinguished by a unique combination of precision and vision.

Based in Los Angeles or New York, the Information Security Analyst is responsible for responding to events and alerts generated by information security technologies, user reported events and any activity, which is suggestive of a potential information security event/incident.

The Information Security Analyst is a hands-on technologist who has a high degree of expertise in the use of technologies used in the investigation of information security events and has a high level of expertise in performing security event analysis and incident response. The Information Security Analyst is a subject matter expert (SME) for all security event detection and response technologies. The scope of this position is firm wide and requires an understanding of all IT systems the firm uses and how they provide value to the business.

The Information Security Analyst works closely with other members of the Information Security Team in ensuring that the information security posture of the firm is maintained and takes a proactive approach in continually assessing the security of firm systems throughout their lifecycle, providing recommendations for enhancing security and adapting to new threats and vulnerabilities.

This role reports to the Director of Security Operations.

Responsibilities include

• Serve as a primary escalation point for security events
• Serve as an SME for event/incident detection and response
• Analyze and respond to security events found internally or via the firm’s Managed Security Service Providers
• Review security context alerts and logs using the firm’s security information event management platform (SIEM) or other tools
• Build dashboards and custom SIEM queries as need to facilitate detection, response and other use-cases.
• Serve as an initial point of contact for help desk tickets assigned to the Information Security Team
• Promptly respond to requests for assistance from end-users and others regarding incidents or security concerns at the firm
• Escalate security events/incidents according to defined workflow and in accordance with any relevant SLAs
• Thoroughly document the results of security event/incident investigations
• Adhere to relevant policies, procedures, standards and security good/accepted practices
• Resolve problems independently and understand escalation procedure
• Respond in a timely manner to all requests for access or other security exceptions requiring approval or involvement from the information security team
• Maintain current security certifications and attend industry seminars and relevant continuing education events
• Monitor and investigate security events involving ar

[…]
onuses.

______

For technical difficulties with our online application, please contact us at staffrecruiting@gibsondunn.com . Our recruiting support team will respond as soon as possible.

______

Gibson Dunn is committed to ensuring equal employment opportunities for all qualified applicants, including individuals with disabilities. We strive to ensure an inclusive and accessible hiring experience. The Firm will provide reasonable accommodations to qualified individuals with disabilities to enable participation in the application and recruitment process, unless doing so would impose an undue hardship, in accordance with applicable laws and regulations.

If you require a reasonable accommodation to complete an application, participate in an interview, or otherwise take part in the recruitment process, please contact us at recruiting-accommodations@gibsondunn.com . Please note, this is a dedicated email inbox established exclusively to assist applicants with accommodation request related to the recruitment process. Inquiries about the status of an application or other non-accommodation matter will not receive a response.

______

Notice to Recruitment Agencies: Gibson Dunn does not accept unsolicited resumes from recruitment agencies, headhunters, or vendors. Resumes sent to any Gibson Dunn employee or attorney, or submitted by an agency through the direct candidate application portal will not establish agency ownership of the candidate and Gibson Dunn will not be expected to honor an agency’s terms or pay any related fees. When a role is open for agency submissions, Gibson Dunn will notify our current agency partners and make the position available through our Agency Portal in Greenhouse. Only agencies that have been given portal access are authorized to submit candidates for consideration. Agencies without a current agreement that wish to be considered for future opportunities may contact staffrecruiting@gibsondunn.com . Please do not send resumes to this address.