At REI, our mission is to inspire, educate and outfit for a lifetime of outdoor adventure and stewardship. As a Senior Cybersecurity Analyst, you will be responsible for protecting the Co-op by following incident detection and response policies and procedures in order to identify, detect, communicate and respond to cybersecurity threats across the enterprise environment. As a Senior Cybersecurity Analyst, you should have a strong comprehension of incident response, work well with other people, and have strong verbal and written communication skills.

This is an exciting time to consider joining the team as we are advancing the technology to build a next generation Cybersecurity Defense Center. You would have the opportunity to contribute your expertise while growing your own skillset in digital forensics and incident response using best in class technology. All while helping to save the planet!

By staying true to our roots, prioritizing work/life balance for our teams, and making commitments to Racial Equity, Diversity, and Inclusion company-wide, we’ve earned a place on Forbes Magazine’s 2022 list of Best Places to Work For Women and have enjoyed recognition from FORTUNE Magazine as a Best Company to Work For over several consecutive years. We have worked to influence legislation through the REI Cooperative Action Fund, a community-supported public charity designed to harness the collective power of the co-op’s members and employees. The Cooperative Action Fund facilitates the building of a more just, equitable, and inclusive outdoor culture. We work hard – and play hard – to earn and keep our reputation for quality and integrity every single day.

•            Participates in security incident response activities.

•            Analyzes threats and current security controls to identify gaps in current defensive posture.

•            Analyze disparate data sources for security incidents.

•            Develop content to improve detective capabilities in SIEM/SOAR.

•            Respond to network security incidents promptly to mitigate damage or restore service.

•            Develop and deliver metrics as requested.

•            Partners with constituents and stakeholders to implement changes to process and technology.

•            Participates in the creation of roadmaps for current security capabilities.

•            Ensures documentation for managed platforms/services are detailed, thorough, and current.

•            Helps promote and develop communications related to campaigns for cybersecurity awareness.

•            Keeps current on organization's business practice, technology, and cybersecurity posture.

•            Makes recommendations on improvements to be made to existing security controls.

•            Participates in rotating after hours on-call schedule.

•            Provide mentorship to junior analysts on the team.

This position correlates cybersecurity related data across the entire enterprise, performing Cybersecurity Incident Response Handling and Incident containment and recovery while assisting application owners to understand and implement the security aspects of their applications. The role requires knowledge of system security design and network security best practices, analytical and organizational skills, and the ability to effectively communicate and work independently and as part of a team as required. Models and acts in accordance with REI’s guiding values and mission.

Requirements:

• 4+ years’ professional experience in Digital Forensics/Incident Response/Cyber Security Operations experience.
• 6+ years’ experience within an Information Technology function (customer support, networking, software development, etc.)
• Current holder of at least one recognized security-relevant certification (i.e., CISSP)
• Expert-level working knowledge and deep understanding of cyber security in at least two or more of the following disciplines: network engineering, Active Directory, public key infrastructure, encryption, DLP, endpoint security, penetration testing, application security, or cloud security
• Experience with threat modeling (ASVS 4, MITRE ATT&CK, or other)
• Strong written and oral communication skills; can effectively communicate technical concepts
• Actively participates and collaborates with others on one's own team and across REI for the achievement of business goals.
• Flexible in one's viewpoints and positions in order to support the direction taken by others at REI.
• Executes effectively by using resources efficiently, meeting deadlines, and keeping others informed of work plans and progress toward goals.
• Clearly conveys and accurately receives information by a variety of methods and in various situations.