Henry Ford Health
Principal Forensic & Incident Response Architect | Full Time
Henry Ford Health, Detroit, Michigan, United States, 48228
Principal Forensic & Incident Response Architect | Full Time
Join to apply for the
Principal Forensic & Incident Response Architect | Full Time
role at
Henry Ford Health Principal Forensic & Incident Response Architect | Full Time
5 days ago Be among the first 25 applicants Join to apply for the
Principal Forensic & Incident Response Architect | Full Time
role at
Henry Ford Health Get AI-powered advice on this job and more exclusive features. General Summary
Working within the Information Privacy and Security Office, the Principal Forensic and Incident Response Architect works closely with all IT departments to detect, analyze, contain, and mitigate computer security incidents. This position is expected to lead and participate in incident response activities including but not limited to computer forensic investigations, live response and triage, and electronic discovery. The Principal Forensic and Incident Response Architect will also perform proactive activities including, but not limited to threat hunting, detection engineering, and tabletop exercises. The Principal Analyst will serve as an escalation point for cyber security incidents and provide oversight of cyber security investigations. The Principal Forensic and Incident Response Architect will report to the Director of Incident Response. This position will work in a collaborative effort with IT and business units to ensure that cyber security incidents are handled appropriately to mitigate the impact of a cyber security incident. General Summary
Working within the Information Privacy and Security Office, the Principal Forensic and Incident Response Architect works closely with all IT departments to detect, analyze, contain, and mitigate computer security incidents. This position is expected to lead and participate in incident response activities including but not limited to computer forensic investigations, live response and triage, and electronic discovery. The Principal Forensic and Incident Response Architect will also perform proactive activities including, but not limited to threat hunting, detection engineering, and tabletop exercises. The Principal Analyst will serve as an escalation point for cyber security incidents and provide oversight of cyber security investigations. The Principal Forensic and Incident Response Architect will report to the Director of Incident Response. This position will work in a collaborative effort with IT and business units to ensure that cyber security incidents are handled appropriately to mitigate the impact of a cyber security incident.
Education/Experience Required
Bachelor's Degree (Security, Technology, or Forensics) or equivalent of five (5) years of relevant experience in lieu of degree is required. Minimum of two (2) years leading hands-on enterprise security incident response investigations, required. Minimum of two (2) years executing threat hunting in both on-premise and cloud environments using both automated tools and manual techniques, required. Solid understanding of network and system intrusion and detection methods, examples of related technologies include SIEM, End Point Detection and Response, firewalls, hacking tools, techniques, and procedures. Deep understanding of Windows and Unix\Linux operating systems including logging facilities. Understanding of network protocol analysis, public key infrastructure, SSL, Active Directory. Understanding of basic malware analysis, endpoint lateral movement detection methodologies and host forensic tools. Understanding of Indicators of Compromise (IOCs) and attacker TTPs. Familiarity with MITRE ATT&CK. Expert understanding of information systems security; network architecture; general database concepts; document management; hardware and software troubleshooting; electronic mail systems; Microsoft Office applications; intrusion tools; and computer forensic tools such as Axiom, EnCase, Access Data, and/or FTK.
Certifications/Licensures Required
GCIH - GIAC Certified Incident Handler, preferred. GNFA - GIAC Network Forensic Analyst, Preferred. GCFA - GIAC Certified Forensic Analyst Preferred. GCFE -GIAC Certified Forensic Examiner preferred. CFCE - Certified Forensic Computer Examiner, preferred.
Additional Information
Organization: Corporate Services Department: Ascension Cybersecurity IR Shift: Day Job Union Code: Not Applicable
Seniority level
Seniority level Associate Employment type
Employment type Full-time Job function
Job function Education and Training Industries Hospitals and Health Care, Insurance, and Wellness and Fitness Services Referrals increase your chances of interviewing at Henry Ford Health by 2x Get notified about new Principal jobs in
Detroit, MI . Senior Vice President of Acquisitions (relocation to the Dayton/Northern Cincinnati area)
Vice President, North Regional Development
Senior Vice President (SVP) of Business Development - Remote (US)
Novi, MI $200,000.00-$350,000.00 1 week ago Sr Vice President of Facilities Advancement
Vice President of Manufacturing Engineering
Associate Vice President, Embedded Engineering
Detroit, MI $115,973.00-$147,866.29 2 weeks ago Vice President Women and Children, Inpatient Surgery, Peri-Operative and Ambulatory Surgical Services
Vice President of Manufacturing Engineering
Principal Management Engineer - Full time - Detroit
Vice President of Operations, Energy Solutions & Services
Southfield, MI $236,997.00-$347,595.59 7 hours ago Vice President of Finance and Accounting
Principal Management Engineer - Full time - Detroit
Principal Management Engineer - Full time - Detroit
Consulting Operations Senior Vice President - Senior Living
Head of Design Management, BLUE OCTOPUS RECRUITMENT LTD
Detroit Metropolitan Area $180,000.00-$210,000.00 3 weeks ago Divisional Vice President – Great Lakes Region K12 - Michigan & Ohio
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
#J-18808-Ljbffr
Join to apply for the
Principal Forensic & Incident Response Architect | Full Time
role at
Henry Ford Health Principal Forensic & Incident Response Architect | Full Time
5 days ago Be among the first 25 applicants Join to apply for the
Principal Forensic & Incident Response Architect | Full Time
role at
Henry Ford Health Get AI-powered advice on this job and more exclusive features. General Summary
Working within the Information Privacy and Security Office, the Principal Forensic and Incident Response Architect works closely with all IT departments to detect, analyze, contain, and mitigate computer security incidents. This position is expected to lead and participate in incident response activities including but not limited to computer forensic investigations, live response and triage, and electronic discovery. The Principal Forensic and Incident Response Architect will also perform proactive activities including, but not limited to threat hunting, detection engineering, and tabletop exercises. The Principal Analyst will serve as an escalation point for cyber security incidents and provide oversight of cyber security investigations. The Principal Forensic and Incident Response Architect will report to the Director of Incident Response. This position will work in a collaborative effort with IT and business units to ensure that cyber security incidents are handled appropriately to mitigate the impact of a cyber security incident. General Summary
Working within the Information Privacy and Security Office, the Principal Forensic and Incident Response Architect works closely with all IT departments to detect, analyze, contain, and mitigate computer security incidents. This position is expected to lead and participate in incident response activities including but not limited to computer forensic investigations, live response and triage, and electronic discovery. The Principal Forensic and Incident Response Architect will also perform proactive activities including, but not limited to threat hunting, detection engineering, and tabletop exercises. The Principal Analyst will serve as an escalation point for cyber security incidents and provide oversight of cyber security investigations. The Principal Forensic and Incident Response Architect will report to the Director of Incident Response. This position will work in a collaborative effort with IT and business units to ensure that cyber security incidents are handled appropriately to mitigate the impact of a cyber security incident.
Education/Experience Required
Bachelor's Degree (Security, Technology, or Forensics) or equivalent of five (5) years of relevant experience in lieu of degree is required. Minimum of two (2) years leading hands-on enterprise security incident response investigations, required. Minimum of two (2) years executing threat hunting in both on-premise and cloud environments using both automated tools and manual techniques, required. Solid understanding of network and system intrusion and detection methods, examples of related technologies include SIEM, End Point Detection and Response, firewalls, hacking tools, techniques, and procedures. Deep understanding of Windows and Unix\Linux operating systems including logging facilities. Understanding of network protocol analysis, public key infrastructure, SSL, Active Directory. Understanding of basic malware analysis, endpoint lateral movement detection methodologies and host forensic tools. Understanding of Indicators of Compromise (IOCs) and attacker TTPs. Familiarity with MITRE ATT&CK. Expert understanding of information systems security; network architecture; general database concepts; document management; hardware and software troubleshooting; electronic mail systems; Microsoft Office applications; intrusion tools; and computer forensic tools such as Axiom, EnCase, Access Data, and/or FTK.
Certifications/Licensures Required
GCIH - GIAC Certified Incident Handler, preferred. GNFA - GIAC Network Forensic Analyst, Preferred. GCFA - GIAC Certified Forensic Analyst Preferred. GCFE -GIAC Certified Forensic Examiner preferred. CFCE - Certified Forensic Computer Examiner, preferred.
Additional Information
Organization: Corporate Services Department: Ascension Cybersecurity IR Shift: Day Job Union Code: Not Applicable
Seniority level
Seniority level Associate Employment type
Employment type Full-time Job function
Job function Education and Training Industries Hospitals and Health Care, Insurance, and Wellness and Fitness Services Referrals increase your chances of interviewing at Henry Ford Health by 2x Get notified about new Principal jobs in
Detroit, MI . Senior Vice President of Acquisitions (relocation to the Dayton/Northern Cincinnati area)
Vice President, North Regional Development
Senior Vice President (SVP) of Business Development - Remote (US)
Novi, MI $200,000.00-$350,000.00 1 week ago Sr Vice President of Facilities Advancement
Vice President of Manufacturing Engineering
Associate Vice President, Embedded Engineering
Detroit, MI $115,973.00-$147,866.29 2 weeks ago Vice President Women and Children, Inpatient Surgery, Peri-Operative and Ambulatory Surgical Services
Vice President of Manufacturing Engineering
Principal Management Engineer - Full time - Detroit
Vice President of Operations, Energy Solutions & Services
Southfield, MI $236,997.00-$347,595.59 7 hours ago Vice President of Finance and Accounting
Principal Management Engineer - Full time - Detroit
Principal Management Engineer - Full time - Detroit
Consulting Operations Senior Vice President - Senior Living
Head of Design Management, BLUE OCTOPUS RECRUITMENT LTD
Detroit Metropolitan Area $180,000.00-$210,000.00 3 weeks ago Divisional Vice President – Great Lakes Region K12 - Michigan & Ohio
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
#J-18808-Ljbffr