At BETA Technologies, we apply our intellectual curiosity, passion for aviation, and commitment to sustainability toward a shared mission of revolutionizing electric aviation. Regardless of the position one holds, each team member brings their talent and desire to positively impact the environment and lives of others in a refreshing, vibrant, and inclusive culture.
The Cybersecurity Incident Analyst is the lifeblood of BETA’s Information Security Operations program: pursuing findings from our Security Operations Center (SOC), tracking remediation, identifying opportunities for improvement to BETA’s Information Security posture, and maximizing BETA’s readiness to address information security incidents by resourcing, training, exercising, and continuously improving our incident response (IR) capabilities.
\n
How you will contribute to revolutionizing electric aviation:
Own one or more functions of BETA’s Information Security Operations program, support the others
Triage findings from BETA’s SOC and other sensors, owning resolution where possible and documenting/tracking resolution by others where needed
Document and track remediation of vulnerabilities and security-relevant misconfigurations, leading periodic reviews with operators of affected assets to guide resolution
Respond to information security incidents throughout BETA’s information environment as a member of our Incident Response Team (IRT)
Develop, maintain, and enhance the resources supporting training- and execution of BETA’s Information Security Incident Response Protocol (IRP)
Train and exercise the IRP with Team Members who will staff the IRT
Collaborate closely with other Digital Infrastructure staff to maximize alignment between security- and operational incident response
Contribute reporting to inform periodic (monthly, annual, etc.) enterprise security posture reviews
Support audits throughout BETA’s information environment by producing required artifacts
Cross-train with other BETA’s Cybersecurity Analysts and understand their workflows sufficiently to provide coverage in the event of their absence
Minimum Qualifications:
Strong understanding of information security/cybersecurity first principles
Professional experience in an information security/cybersecurity role: continuous monitoring or incident response
Strong teamwork orientation
Aptitude for organizing information for others to access
Aptitude for training others
Excellent written and verbal communication
Strong sense of initiative
Above and Beyond Qualifications:
Demonstrated ability to interpret security information for non-practitioners
Experience developing- and delivering training in a professional setting, both in-person and online
Experience with risk-based vulnerability management
Experience with malware analysis and response
Experience securing IoT/ICS assets
Experience leading information security/cybersecurity incident response
Experience developing incident response plans or emergency management plans
Enthusiasm for training responders through exercises
Experience collecting data in support of reporting via web services APIs
Academic degree in information security/cybersecurity, SANS GIAC certification (DFIR track, Cyber Defense track) or equivalent, NIMS Incident Command System certification or similar
Physical Demands and Work Environment:
This role consists primarily of computer work and presentations to small groups in an office environment
\n
$80,000 - $100,000 a year
The wage listed here reflects our best faith estimate for this role. We pay competitively and base compensation on a variety of factors including skills, experience, industry background, and the evolving needs of the role. We remain committed to fair and equitable pay and we're happy to discuss during the interview process.
\n
Build electric airplanes with us!
We encourage all driven candidates to apply, even if they do not meet every listed qualification.
We are an equal opportunity employer. Employment decisions are based on merit, competence and qualifications and will not be influenced in any manner on race, color, religion, age, sex, sexual orientation, gender identity, national origin, ancestry, citizenship, disability, veteran or military status, genetic information, pregnancy, or any other protected characteristic under federal, state, or local law. BETA complies with all applicable federal, state and local non-discrimination laws and does not tolerate discrimination of any kind in our workplace.
Employment offers are contingent upon the successful completion of a background check. BETA Technologies participates in E-Verify.