Incident Response Specialist - Enterprise Risk and Compliance
Best Buy

As an Incident Response Specialist with Enterprise Risk and Compliance, you will play a key role in arming our security teams with actionable information and intelligence to help our world class security teams and security apparatus defend the enterprise and our customers from advanced threats. What makes Best Buy an ideal place to pursue your interest in Information Security? As you might know, Best Buy is the leading global retailer of consumer electronics, generating over 40 billion dollars annually with continuous growth. Additionally, in recent years, we have embarked on a significant journey of expansion and innovation to build for the future and maintain our leadership position. Just as we innovate with our customer-facing applications, we are creating new, world-class tools and methods to protect our customer information. By joining Best Buy's Information Security Team, you become part of a forward-thinking, dynamic group of security experts. You will have the chance to contribute your ideas to a company that embraces change, and if you excel, there are plenty of opportunities for career advancement.

This role is remote eligible, which means you would work virtually from home or another non-Best Buy location.
The working days/hours of this role are Th, F, and Saturday from 3 PM to 3 AM and every other Wednesday from 3 PM to 3 AM.

What you'll doRespond to security incidents including gathering digital evidence, analyzing, developing, and presenting forensic evidence.Perform data analytics to identify and confirm cyber security threats.Utilize experience and knowledge of a variety of technologies to conduct analysis of evidence to determine their validity and whether the information has forensic significance.Conduct network forensic investigations including packet analysis.Conduct malware analysis to determine capabilities and develop indicators of compromise.Participate in proof of concepts for new cyber security tools and capabilities.Prepare formal written reports suitable for legal matters.Support incident and investigations post-mortem briefings, analysis, and reporting.Basic qualifications3+ years of experience in information security, computer forensics and investigations or related field?Preferred qualificationsPrevious experience working in cloud environments in a Cybersecurity capacity.Previous experience working in a Fortune 500 Security Operations Center or Incident Response Team.Relevant Cybersecurity Certifications (GIAC, EC-Council, Offensive Security, etc.).2+ years of recent operational Cybersecurity experience (SOC, Incident Response, Malware Analysis, etc.).Understanding and utilization of KQL.Understanding of regular expression and at least one common scripting language (PERL, Python, PowerShell, ETC).Bachelor's degree in Cybersecurity or related discipline.What's in it for you
We're committed to helping our people thrive at work and at home. We offer generous benefits that address your total well-being and provide support as you need it, especially key moments in your life.
Our benefits include:Competitive payGenerous employee discountPhysical and mental well-being supportAbout us
As part of the Best Buy team, you'll help us fulfill our purpose to enrich lives through technology. We bring that to life every day by humanizing and personalizing tech solutions for every stage of life - in our stores, online and in customers' homes.
Our culture is built on deeply supporting and valuing our amazing employees who make it all possible. We're committed to being a great place to work, where you can unlock unique career possibilities. Above all, we aim to provide a place where you can bring your full, authentic self to work now and into the future. Tomorrow works here.™

Best Buy is an equal opportunity employer. Position Type: Full timePandoLogic. Keywords: Information Security Incident Handler, Location: Minneapolis, MN - 55423