Information Security Analyst

The role

The Information Security Analyst responds to security events and alerts generated by security technologies and user reports. This role involves performing security event analysis, incident response, and maintaining the firm's security posture through proactive assessment.

What you will do

• Serve as a primary escalation point for security events
• Serve as an SME for event/incident detection and response
• Analyze and respond to security events found internally or via Managed Security Service Providers
• Review security context alerts and logs using SIEM or other tools
• Build dashboards and custom SIEM queries
• Serve as an initial point of contact for help desk tickets assigned to the Information Security Team
• Respond to requests for assistance from end-users regarding incidents or security concerns
• Escalate security events/incidents according to defined workflow and SLAs
• Document the results of security event/incident investigations
• Monitor and investigate security events involving AI, machine learning, generative AI, and large language model technologies

Required qualifications

• University degree in a technology related discipline or 3 years of relevant experience
• 5-7 years of experience in a dedicated information security analysis role
• 3-5 years of experience in information technology in an area such as networking, desktop engineering, programming, systems administration, or help desk
• Practical experience with TCP/IP networking
• Significant experience with the Windows operating system and event logs
• Significant experience with and expertise in security event detection, analysis and incident response tools
• Significant experience and expertise in conducting security event analysis and incident response
• Significant experience and expertise in using SIEM platforms for searching and correlating events
• Strong knowledge of networking concepts including DNS, switching, routing and firewalls
• Ability to maintain strict confidentiality of the firm's internal and personnel affairs
• Ability to work in a multi-office environment
• Familiarity with AI security concepts such as prompt injection, data leakage, model manipulation, insecure integrations, excessive agency, and adversarial use of AI

Nice to have

• Experience investigating security events involving cloud applications, APIs, automation platforms, or AI-enabled technologies
• Experience developing or tuning detections for emerging threats, including AI-assisted phishing, impersonation, malware, credential attacks, and social engineering
• Experience using AI-assisted capabilities within security technologies such as SIEM, endpoint detection and response, email security, threat intelligence, vulnerability management, or security orchest
• Practical experience applying human oversight and validation to AI-generated security findings, recommendations, or automated actions

About the company

Gibson Dunn is a leading global law firm, advising clients on significant transactions and disputes.