BePartOfAHigh-PerformingTeam
Joinaglobalfinancialservicestechnologyorganizationdedicatedtoprotectingcriticalbankingsystems,sensitiveinformation,andenterpriseinfrastructureagainstevolvingcyberthreats.Theorganizationoperatesinahighlyregulatedenvironmentwherecybersecurity,operationalresilience,andcontinuousimprovementareessentialtobusinesssuccess.
ThisopportunitysitswithinanestablishedSecurityOperationsCenter(SOC),workingalongsidecybersecurityspecialistsfocusedonthreatdetection,incidentresponse,digitalforensics,andproactivesecurityoperations.Theteamemphasizestechnicalinvestigation,collaboration,andinnovation,leveragingadvancedsecuritytechnologiestostrengthendefensesandimprovetheeffectivenessofenterprisesecuritymonitoring.
What'sInStoreForYou
Remoteworkopportunitysupportingenterprisecybersecurityoperations.
Engagement:W2only(noC2C/1099).
WorkwithanexperiencedSOCteamresponsibleforprotectingacomplexfinancialservicesenvironment.
Gainexposuretoadvancedsecuritymonitoring,threathunting,incidentresponse,andsecurityautomationtechnologies.
Collaboratewithspecialistsacrossdetectionengineering,incidentresponse,andsecurityautomation.
Contributetocontinuousimprovementsincybersecurityprocesses,detectioncapabilities,andoperationalefficiency.
HowYouWillMakeAnImpact
Investigatecybersecurityalertsandsuspiciousactivitytodeterminepotentialthreats,assessseverity,identifyrootcauses,andcoordinateappropriateresponses.
Performdetailedincidentinvestigations,includinganalyzingattackerbehavior,identifyingcompromisedassets,andreconstructingsecurityevents.
Conductproactivethreathuntingacrossenterprisesystemstoidentifysuspiciousbehaviorthatmayhavebypassedexistingsecuritycontrols.
ApplytheMITREATT&CKframeworkandcyberkillchainconceptstoanalyzeadversarytactics,techniques,andprocedures(TTPs).
LeverageSIEM,EDR,NDR,XDR,andbehavioralanalyticstechnologiestoinvestigatethreatsandimprovedetectioneffectiveness.
Partnerwithdetectionengineeringteamstoidentifymonitoringgaps,reducefalsepositives,andenhancesecurityalertingcapabilities.
Collaboratewithsecurityautomationspecialiststostreamlinerepetitiveinvestigationandresponseactivities.
Supportdigitalforensicinvestigationsandcontributetechnicalfindingsduringcybersecurityincidents.
Develop,maintain,andimproveSOCinvestigationprocedures,incidentresponseplaybooks,andoperationaldocumentation.
Evaluateemergingattacktechniquesandassesstheorganization'sabilitytodetectandrespondtothem.
AnalyzesecurityactivityacrossWindows,Linux,ActiveDirectory,cloudenvironments,andenterprisenetworks.
Contributetosecurityinitiativesthatimproveoperationalresilience,responseefficiency,andoverallcybersecuritymaturity.
Requirements
AreYouAnExperiencedSOCAndIncidentResponseProfessionalReadyToMakeAnImpact?
4+yearsofprofessionalcybersecurityexperience,preferablyinvolvinghands-onSOCoperations,incidentresponse,threathunting,ordigitalforensics.Candidateswith5–7yearsofrelevantexperienceareparticularlyalignedwiththerole.
Demonstratedexperienceinvestigatingsecurityalerts,analyzingsuspiciousactivity,andrespondingtocybersecurityincidents.
Strongunderstandingofenterprisesecuritymonitoringtechnologies,includingSIEM,EDR,NDR,XDR,andUEBA.
WorkingknowledgeoftheMITREATT&CKframework,cyberkillchainmethodology,andcommonattackertechniques.
ExperienceinvestigatingsecurityeventsinvolvingWindows,Linux,ActiveDirectory,andcloudtechnologies.
Knowledgeofnetworksecurityconcepts,includingfirewalls,proxyservers,emailsecurity,andnetworktrafficanalysis.
Abilitytodistinguishgenuinesecuritythreatsfromfalsepositivesandrecommendimprovementstodetectionlogic.
Familiaritywiththreathuntingmethodologies,digitalforensics,andincidentresponseprocedures.
Stronganalyticalandtroubleshootingskillswiththeabilitytoinvestigatecomplextechnicalissuesindependently.
Excellentwrittenandverbalcommunicationskills,particularlywhendocumentinginvestigationsandcommunicatingtechnicalfindings.
Abilitytoprioritizecompetingincidentsandresponsibilitiesinafast-pacedsecurityoperationsenvironment.
Self-motivated,detail-oriented,andcommittedtocontinuouslearningandcybersecurityimprovement.
ProfessionalcertificationssuchasGCIH,GNFA,GCFA,CEH,OSCP,CISSP,orcomparablecredentialsareadvantageousbutnotrequired.
- Work permits
- United States
- Timezones
- United States
- Experience
- 4+ years