Information Security Analyst

The role

The Information Security Analyst responds to security events and alerts using information security technologies. This role involves performing security event analysis, incident response, and maintaining the firm's security posture.

What you will do

• Serve as a primary escalation point for security events
• Serve as an SME for event/incident detection and response
• Analyze and respond to security events found internally or via Managed Security Service Providers
• Review security context alerts and logs using SIEM or other tools
• Build dashboards and custom SIEM queries
• Serve as an initial point of contact for help desk tickets assigned to the Information Security Team
• Respond to requests for assistance from end-users regarding incidents or security concerns
• Escalate security events/incidents according to defined workflow and SLAs
• Document the results of security event/incident investigations
• Monitor and investigate security events involving AI, machine learning, generative AI, and large language model technologies

Required qualifications

• University degree in a technology related discipline or 3 years of relevant experience
• 5-7 years of experience in a dedicated information security analysis role
• 3-5 years of experience in information technology in an area such as networking, desktop engineering, programming, systems administration, or help desk
• Practical experience with TCP/IP networking
• Significant experience with the Windows operating system and event logs
• Significant experience with and expertise in security event detection, analysis and incident response tools
• Significant experience and expertise in conducting security event analysis and incident response
• Significant experience and expertise in using SIEM platforms for searching and correlating events
• Strong knowledge of networking concepts including DNS, switching, routing and firewalls
• Ability to maintain strict confidentiality of the firm's internal and personnel affairs
• Willingness to travel to other offices as required
• Strong written/verbal communication skills

Nice to have

• Familiarity with AI security concepts such as prompt injection, data leakage, model manipulation, insecure integrations, excessive agency, and adversarial use of AI
• Experience investigating security events involving cloud applications, APIs, automation platforms, or AI-enabled technologies
• Experience developing or tuning detections for emerging threats, including AI-assisted phishing, impersonation, malware, credential attacks, and social engineering
• Experience using AI-assisted capabilities within security technologies

Benefits

• health care
• retirement benefits
• paid days off, including sick time, and vacation time
• parental leave
• basic life insurance
• Flexible Spending Accounts
• discretionary, performance-based bonuses

Before you apply

• Gibson Dunn will consider for employment qualified Applicants with Criminal Histories in a manner consistent with the requirements of local law

About the company

Gibson Dunn is a leading global law firm, advising clients on significant transactions and disputes.