Gibson Dunn - Information Security Analyst
Requirements
• Ability to relate to non-technical users in user-friendly language • Ability to understand or learn the technical implications of security threats • Ability to manage multiple concurrent objectives or activities, and effectively make judgments in prioritizing and time allocation in a high-pressure environment • Ability to gauge one’s strengths and limitations • Ability to deal with changes and adapt to a changing environment • Must demonstrate the ability to maintain strict confidentiality of the firm's internal and personnel affairs • Ability to work well with others, harness different skills and experience, and build a strong sense of team spirit • Highly self-motivated and directed • Ability to work in a multi-office environment and willingness to travel to other offices as required • Ability to work effectively in a culturally and educationally diverse environment • Possess excellent troubleshooting, problem solving, and verbal/written communication skills • Ability to manage critical situations, and maintain solid relationships with colleagues and firm staff and attorneys • Ability to anticipate problems, communicate them, and resolve if appropriate • Ability to work independently and as part of a team • Must have strong written/verbal communication skills • Must be detail oriented with strong customer service skills • Requires strong interpersonal and organization skills • Take ownership of issues and responsibility for customer satisfaction and overall success of services provided • Interface with a variety of customers in a polite, positive, and professional manner • Familiarity with AI security concepts such as prompt injection, data leakage, model manipulation, insecure integrations, excessive agency, and adversarial use of AI. • Ability to communicate AI-related security risks and technical findings clearly to both technical and non-technical audiences. • University degree in a technology related discipline or 3 years of relevant experience • 5-7 years of experience in a dedicated information security analysis role • 3-5 years of experience in information technology in an area such as; networking, desktop engineering, programming, systems administration, help desk • Strong critical thinking and problem-solving skills • Practical experience with TCP/IP networking • Strong knowledge of networking concepts including; DNS, switching, routing and firewalls • Experience investigating security events involving cloud applications, APIs, automation platforms, or AI-enabled technologies. • Experience developing or tuning detections for emerging threats, including AI-assisted phishing, impersonation, malware, credential attacks, and social engineering. • Experience using AI-assisted capabilities within security technologies such as SIEM, endpoint detection and response, email security, threat intelligence, vulnerability management, or security orchestration platforms. • Practical experience applying human oversight and validation to AI-generated security findings, recommendations, or automated actions. • Gibson Dunn will consider for employment qualified Applicants with Criminal Histories in a manner consistent with the requirements of local law. • For technical difficulties with our online application, please contact us at [email protected]. Our recruiting support team will respond as soon as possible. • [email protected] • Gibson Dunn is committed to ensuring equal employment opportunities for all qualified applicants, including individuals with disabilities. We strive to ensure an inclusive and accessible hiring experience. The Firm will provide reasonable accommodations to qualified individuals with disabilities to enable participation in the application and recruitment process, unless doing so would impose an undue hardship, in accordance with applicable laws and regulations. If you require a reasonable accommodation to complete an application, participate in an interview, or otherwise take part in the recruitment process, please contact us at [email protected]. Please note, this is a dedicated email inbox established exclusively to assist applicants with accommodation request related to the recruitment process. Inquiries about the status of an application or other non-accommodation matter will not receive a response. • Please note,
Responsibilities
• Serve as a primary escalation point for security events • Serve as an SME for event/incident detection and response • Analyze and respond to security events found internally or via the firm’s Managed Security Service Providers • Review security context alerts and logs using the firm’s security information event management platform (SIEM) or other tools • Build dashboards and custom SIEM queries as need to facilitate detection, response and other use-cases. • Serve as an initial point of contact for help desk tickets assigned to the Information Security Team • Promptly respond to requests for assistance from end-users and others regarding incidents or security concerns at the firm • Escalate security events/incidents according to defined workflow and in accordance with any relevant SLAs • Thoroughly document the results of security event/incident investigations • Adhere to relevant policies, procedures, standards and security good/accepted practices • Resolve problems independently and understand escalation procedure • Respond in a timely manner to all requests for access or other security exceptions requiring approval or involvement from the information security team • Maintain current security certifications and attend industry seminars and relevant continuing education events • Monitor and investigate security events involving artificial intelligence, machine learning, generative AI, and large language model technologies. • Identify and investigate potential misuse of AI technologies, including unauthorized AI services, sensitive data exposure, prompt injection, malicious content generation, and AI-assisted social engineering. • Develop and maintain detection queries, correlation rules, dashboards, and response procedures for AI-related threats and anomalous activity.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT