Internet Storm Center

Job Description

Taxwell helps everyday Americans get every tax advantage they deserve by finding credits and deductions they never even knew existed. Our tax preparation software offers easy guidance and ensures your maximum tax refund. We strive to build a team of like-minded experts in both tax and technology who align with our brand purpose, are advocates for our customers and have a fresh, non-traditional approach to the tax industry.

The Sr. Security Ops Analyst/Incident Response role is a part of the Taxwell IRM team. IRM SecOps provides cyber security monitoring, reporting, and response along with detection capabilities and threat hunting. Duties include, but are not limited to:
Receive incident escalations from monitoring team and assist with real-time advanced analysis, response, and reporting.
Mentor and assist in training analysts to aid in their skills development and analytical capabilities.

Proactively hunt for threats and enacting identification, containment, and eradication measures while supporting recovery efforts.
Point person for coordination with appropriate parties during a security incident – client, management, legal, security, operations, etc.
Create thorough reports and documentation of all incidents and procedures, presenting findings to team and leadership on a routine basis
Supports detection capabilities and refines process through alert validation.
Performs threat hunting and proactive incident response.
Completes follow-through to ensure quality forensic materials are captured, preserved and documented along with details and timelines of events and recommendations to avoid future occurrences.
Assist in the general maintenance and improvement of processes and/or playbooks.
Conduct research regarding the latest methods, tools, and trends in digital forensics analysis.
Conduct analysis using logs, previous alerts, etc. to identify trends to identify and prevent potential incidents.
Ingest data from multiple sources and aggregate client metrics.

Basic Qualifications
Bachelor's degree or equivalent combination of CISSP certification and prior experience
Five or more years of experience in information systems security.
Good communication skills to interact with clients, team members, management, and support personnel.
Good analytical and problem-solving skills.
Ability to work independently and as part of a team, be highly self-motivated.
Experience with cloud environments, such as Microsoft Azure and Amazon. Web Services; Container services and Kubernetes; Azure Monitor and/or Sentinel; Experience with AD and Entra ID; Mimecast and Microsoft Purview; Microsoft OpenAI Services; AWS technologies such as EC2, ECS, Lambdas, LightSail, and VMware Cloud.
Ability to script in PowerShell, Python.

Preferred Qualifications
Previous expertise in consulting or finance, tax background desirable
Preferred experience with EDR solutions such as Defender XDR and CrowdStrike Falcon.
Experience in Data Visualization (example: PowerBI).
Preferred experience with Splunk and osquery.
GIAC GCFA and/or GCFR certification.
Work Environment
Requires being on-call during off hours.
May require occasional weekend work.
Location is Remote.

At Taxwell, we believe our work benefits from the diverse perspectives of our employees. As such, Taxwell welcomes and celebrates diversity and inclusion and is committed to equal opportunity employment. At Taxwell, you can expect a supportive, open, and inclusive atmosphere and a team that values your contributions.

Taxwell is committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants without regard to race, color, religion, sex, national origin, age, disability, marital status, sexual orientation, gender identity, veteran status, and any other status protected under applicable law. Taxwell considers information gathered in the hiring process, including information on this application, confidential, and only shares it on a need-to-know basis or as required by law.

If you need assistance or accommodation due to a disability, you may contact us at HR@Taxwell.com or by calling 828-349-5703 extension 6049 to speak with a member of the HR Talent Acquisition team.