ICS Cybersecurity Analyst position is an individual contributor role that is focused on performing the execution and support pertaining to cybersecurity including network, email, endpoint, cloud, advanced persistent threat, etc. This role requires knowledge and experience in IT security to apply a solid understanding of concepts with practical application to projects such as new security applications, implementation of security tools, support for existing security tools and security investigations. The ICS Cybersecurity Analyst is acquiring higher level knowledge while working with a moderate level of supervision.

How you'll help us innovate to build a better world

* Apply a strong knowledge of cyber security to all areas within the Eastman environment (security trends, cyber threats, insider risks and security defenses)
* Monitor security log monitoring systems and triage security alerts to identify cyber threats
* Identify new ways to combine disparate cyber security data to create new detections and alerts
* Perform system and network incident response, containment, and recovery activities
* Participate in internal/external investigations that extend across multiple teams and document results
* Apply a strong understanding of how to deploy new security tools/applications within the Eastman environment
* Understand and appropriately use development skills to automate processes when appropriate.
* Evaluate application security capabilities and define and deliver security requirements and alternatives
* Provide cybersecurity consulting as needed for individuals and projects within IT
* Collaborate on product evaluations and final recommendations
* Present information to upper management (written or oral) as needed
* Participate in research on security trends in the industry and help develop proposals for how Eastman should react
* Respond to cyber threat activities while on-call

* Demonstrated technical knowledge of security log aggregation and/or security intelligence monitoring systems
* Strong analytical skills in threat, vulnerability, endpoint detection analysis
* Demonstrated ability to produce innovative risk-based security solutions that enable business capabilities
* Strong, proven problem-solving skills and ability to identify, analyze, and resolve problems, driving solutions through to completion.
* Strong interpersonal, communication, and organizational skills
* Ability to manage multiple initiatives and work effectively in a team environment
* Strong presentation skills, particularly to management
* Demonstrated capability to mentor and influence others
* Familiarity with Industrial Control Systems
REQUIRED EDUCATION AND/OR EXPERIENCE:

* B.S. in Computer Science, or related field from accredited college or university or equivalent experience
* Development and programming concepts
* Familiarity with log aggregation technologies like Splunk, QRadar, Arcsight and Microsoft M365 Security Suite
* Minimum of 3-year experience working in a Cybersecurity or IT or ICS Infrastructure role