CME Group · New York, NY, United States
About the company
CME Group is the world's leading derivatives marketplace. But who we are goes deeper than that. Here, you can impact markets worldwide. Transform industries. And build a career by shaping tomorrow. We invest in your success and you own it - all while working alongside a team of leading experts who inspire you in ways big and small. Problem solvers, difference makers, trailblazers. Those are our people. And we're looking for more.
At CME Group, we embrace our employees' unique experiences and skills to ensure that everyone's perspectives are acknowledged and valued. As an equal-opportunity employer, we consider all potential employees without regard to any protected characteristic.
What you will do
Drive the full incident response lifecycle from initial triage to remediation, confidently applying specialty skills like endpoint forensics and malware analysis.
Be ready to operate in a multi-cloud environment.
Conduct regular threat hunts to identify misconfigurations, detection gaps, and other anomalies.
Use AI, Python and REST APIs to build/integrate security tools for incident response needs, while working with automation engineers to develop heavy-duty solutions for advanced use-cases.
Lead regular tabletop exercises to improve team readiness.
Contribute continuously to our internal knowledge base of incident response runbooks and playbooks, keeping it exhaustive, accurate, and reflective of the latest workflows.
Requirements
Innate Curiosity: An exceptional level of curiosity and a track record of self-teaching advanced technical concepts.
Highly Innovative: You have a consistent record of taking unorthodox approaches to challenges and a demonstrated ability to innovate within information technology domains.
A "Researcher" Mindset: A passion for collecting facts, debating details, and diving into "rabbit holes" to solve complex problems.
Adept at High-Pressure Communication: Ability to deal effectively at all levels of the organization and translate technical research into clear, actionable intelligence for leadership.
Highly Detail Oriented: Very strong attention to detail; you notice things others often don't.
Impactfully Collaborative: You excel at technical collaboration and helping teams deliver high-impact.
Nice to have
DFIR Background: 2+ years of practical experience with Digital Forensics, Incident Handling, and/or Malware Analysis.
SIEM/Data Analysis: 2+ years of experience with Q Radar, Sentinel, Splunk, Chronicle, ArcSight, or similar log management technologies.
Experience using leading forensics tools: 2+ years of experience using tools such as KAPE, EnCase, Cellebrite, FTK, Magnet Axiom, and Autopsy, plus comfort with malware analysis tools like Ghidra, Ida Pro, PEStudio, and x64dbg.
Strong IT Fundamentals: Strong understanding of computer networking, operating systems, and their intersection with Cybersecurity.
Programming Skills: Development experience with Python, specifically for data manipulation (Pandas) and interacting with REST APIs.
Cloud Experience: Practical experience with AWS, Google Cloud Platform, or Azure.
Education: BA/BS in Engineering, Computer Science, or Information Security (non-tech degrees acceptable with appropriate levels of Information Security job experience and/or certifications).
Certifications: GCIH, GCFE, GCFA, OSCP, Sec+, and similar cyber-oriented certifications are desired.
What we offer
We provide autonomy and a supportive learning environment with access to top-tier technology, opportunities to align project work with your individual interests, and extensive training programs, including annual training.
Recruitment fraud is on the rise, with scammers using misleading promises of job offers and interviews to solicit money and personal information from job seekers. CME Group adheres to established procedures designed to maintain trust, confidence and security throughout our recruitment process. Learn more here.
Create a free account to apply