Senior Analyst, Cyber Security - Cloud Detection & Response Team

The Sr. Analyst, Detection and Response position is responsible for leading the overall development and implementation of cyber security detection and response procedures and technologies for General Mills’ cloud transformation and ensuring the Cyber Security Incident Response Team (CSIRT) is prepared to perform investigations quickly and correctly on cloud hosted systems. As part of the Detection and Response team, this role develops detective controls, executes threat hunts, and handles incidents escalated from CSIRT. KEY ACCOUNTABILITIES 30% Develop Cloud Detection and Response Capability Develop & document process and procedures for responding to cybersecurity incidents in cloud environments and train others on the process Create detection rules using existing technology to detect cybersecurity incidents in cloud environments Partner across Cyber Security to implement controls and tools to improve our ability to detect incidents 60% General Detection and Response Team participation Work with others in the detection and response team to improve our ability to detect and respond to cybersecurity incidents Build and test detective controls Participate in monthly threat hunts Assist with support tools for detection and response On-call, once a month, for escalations from CSIRT (malware analysis, forensics, …) 10% Partnerships and Benchmarking Maintain existing and develops new contacts within the candidate’s professional network of cyber security peers and leading security consultants/vendors. Continuously develops knowledge of evolving best practices through peer benchmarking, industry events/associations, and educational opportunities. Leverages partnership and relationships to benchmark existing and proposed cyber security solutions. MINIMUM QUALIFICATIONS Associates degree 5+ ys experience in a related field (cybersecurity, IT, etc) Experience with cloud-based systems (AWS, Azure, GCP) from an operational and response perspective. Expertise in incident response processes and tools to detect, analyze, respond and contain cyber security threats quickly and correctly. Experience in forensic techniques used to analyze threats (including malware), to extract key indicators of attack and compromise. Experience with automating and scripting processes. Familiarity with Unix and Windows operating systems and administrative tools Knowledge in tools and techniques used by attackers to gain unauthorized access to systems. Prior experience with information security and associated technologies, including boundary protection (e.g. firewalls, proxies, IDS/IPS), endpoint protection, remote access, and security information and event management. Demonstrated success working closely with leaders, including influencing without direct authority. Demonstrated ability to get things done both independently and in a collaborative, team-oriented environment. Able to independently drive structure out of ambiguity, connect dots across disparate insights, and structure synthesized output. Skilled in mixed Microsoft and open-source operating system environments. PREFERRED QUALIFICATIONS Bachelors degree, preferably in Computer Engineering, CIS (Computer Information Systems), Computer Science, or MIS (Management Information Systems) 7+ ys experience in a related field (cybersecurity, IT, etc) COMPETENCIES/BEHAVIORS REQUIRED High levels of judgement, ethics, and discretion Excellent analytical and conceptual problem-solving skills. Innate curiosity and desire to learn with a strong inclination to drive for results in ambiguous spaces. Strong communication, presentation, and interpersonal skills Ability to present technical material to a non-technical audience Able to influence through relationship building. Self-starter, proactive, demonstrated self, and team motivator. Flexibility to respond 24/7 to urgent matters with a bias for decisive action ADDITIONAL CONSIDERATION The preferred location for this role is Minneapolis, MN however internal remote work-at-home applications within the United States will be considered. COMPANY OVERVIEW We exist to make food the world loves. But we do more than that. Our company is a place that prioritizes being a force for good, a place to expand learning, explore new perspectives and reimagine new possibilities, every day. We look for people who want to bring their best — bold thinkers with big hearts who challenge one other and grow together. Because becoming the undisputed leader in food means surrounding ourselves with people who are hungry for what’s next.