Analyst/Specialist I/II

Role Purpose

Investigations & Intelligence: As part of the Global Security Organization, Investigations and Intelligence is continually focused on raising awareness, refining processes, and utilizing forward thinking risk remediation and analytic techniques to proactively protect Corning’s People, Property, and Values. This role requires a highly curious analyst to assist in preventing, detecting, investigating, responding, and mitigating threats to Corning, including intellectual property theft, espionage, fraud, sabotage, and unauthorized data disclosure.

Insider Risk, a part of Investigations and Intelligence, leads the discovery and integration of information (intelligence) in order to identify, analyze, and resolve risk to the people, information, and operations of Corning Incorporated. We work closely with the larger investigations team to identify and support cases.

In this position, you will play a key role on a team of intelligence and security professionals to create, implement, maintain, and analyze insider risk controls to reduce risk and enforce Corning policies and standards. The Values of Integrity, Quality, and the Individual are of utmost importance to the Insider Risk Operations team.

Key Responsibilities

• Review, analyze, and triage anomalous activity events to detect and mitigate risk in accordance with relevant regional regulations, corporate and business policies, and contractual commitments
• Correlate and analyze multiple data sources to determine severity and intent of anomalous behavior or security events
• Follow established incident response playbooks, while continuously identifying opportunities to improve risk detection and escalation methods
• Support the development and testing of new data protection and risk detection technologies and tools
• Develop and collect metrics to support organizational requirements, measure progress and growth, and identify areas for improvement
• Aid the configuration and calibration of software tools to better meet objectives using logical thinking and a careful, testing-minded approach
• Collect, organize, and analyze all-source data concerning threats to Corning’s people, assets, and information across a variety of digital platforms
• Produce accurate and contextualized reporting of data generated by a variety of tools and sources
• Author, review, and adapt operational documentation to support consistency, governance, and transparency
• Collaborate closely with IT resources to trouble-shoot, problem solve, and maintain risk detection tools
• Contribute to case reviews, escalate cases based on standard process, and continuously calibrate activity according to investigative needs

Experiences/Education - Required

• Bachelor’s Degree or industry or military equivalent work experience
• 1-3 years’ experience working in security operations, intelligence, cybersecurity, incident response, or related field
• Spoken and written fluency in Chinese and English
• Strong analytic skills and a threat-hunting mindset
• Ability to identify and prioritize risk
• Highly flexible, comfortable working in an ambiguous, technical, and adaptive environment.
• Able to effectively triage urgent and or high-risk matters in an effective and objective manner
• Precise, clear, complete, and contextualized report writing and data analysis
• Excellent interpersonal communication skills, including the ability to build working relationships with partner organizations and internal and external stakeholders
• Demonstrates an ability to communicate effectively and tactfully with diverse groups of individuals
• Customer and requirements focused with ability and drive to seek out and align to rigorous process expectations
• Ability to work with ITAR or otherwise federally regulated materials

Experiences Desired

• Experience in data science, data mining, visualization, data management, APIs, scripting, such as Python
• Understanding of web proxy, email, endpoint, and other digital records and solutions
• Familiarity with machine learning and data science principles, tools, and techniques
• Previous experience with Insider Threat and/or security monitoring tools or platforms such as DLP and access control
• Previous experience conducting HR or investigative interviews
• Familiarity with case management tools and practices  
• Experience with data management, aggregation, and storage (warehousing or unstructured systems) 
• Use of statistics for trending and anomaly detection
• An understanding of Corning’s business and assets
• Curiosity and a drive to improve