Skip to main content

Senior Cybersecurity Analyst – SOC, Incident Response & Threat Hunting

RemoteContractSenior

United States · Posted 22 hr. ago

BePartOfAHigh-PerformingTeam

Joinaglobalfinancialservicestechnologyorganizationdedicatedtoprotectingcriticalbankingsystems,sensitiveinformation,andenterpriseinfrastructureagainstevolvingcyberthreats.Theorganizationoperatesinahighlyregulatedenvironmentwherecybersecurity,operationalresilience,andcontinuousimprovementareessentialtobusinesssuccess.

ThisopportunitysitswithinanestablishedSecurityOperationsCenter(SOC),workingalongsidecybersecurityspecialistsfocusedonthreatdetection,incidentresponse,digitalforensics,andproactivesecurityoperations.Theteamemphasizestechnicalinvestigation,collaboration,andinnovation,leveragingadvancedsecuritytechnologiestostrengthendefensesandimprovetheeffectivenessofenterprisesecuritymonitoring.

What'sInStoreForYou

  • Remoteworkopportunitysupportingenterprisecybersecurityoperations.

  • Engagement:W2only(noC2C/1099).

  • WorkwithanexperiencedSOCteamresponsibleforprotectingacomplexfinancialservicesenvironment.

  • Gainexposuretoadvancedsecuritymonitoring,threathunting,incidentresponse,andsecurityautomationtechnologies.

  • Collaboratewithspecialistsacrossdetectionengineering,incidentresponse,andsecurityautomation.

  • Contributetocontinuousimprovementsincybersecurityprocesses,detectioncapabilities,andoperationalefficiency.

HowYouWillMakeAnImpact

  • Investigatecybersecurityalertsandsuspiciousactivitytodeterminepotentialthreats,assessseverity,identifyrootcauses,andcoordinateappropriateresponses.

  • Performdetailedincidentinvestigations,includinganalyzingattackerbehavior,identifyingcompromisedassets,andreconstructingsecurityevents.

  • Conductproactivethreathuntingacrossenterprisesystemstoidentifysuspiciousbehaviorthatmayhavebypassedexistingsecuritycontrols.

  • ApplytheMITREATT&CKframeworkandcyberkillchainconceptstoanalyzeadversarytactics,techniques,andprocedures(TTPs).

  • LeverageSIEM,EDR,NDR,XDR,andbehavioralanalyticstechnologiestoinvestigatethreatsandimprovedetectioneffectiveness.

  • Partnerwithdetectionengineeringteamstoidentifymonitoringgaps,reducefalsepositives,andenhancesecurityalertingcapabilities.

  • Collaboratewithsecurityautomationspecialiststostreamlinerepetitiveinvestigationandresponseactivities.

  • Supportdigitalforensicinvestigationsandcontributetechnicalfindingsduringcybersecurityincidents.

  • Develop,maintain,andimproveSOCinvestigationprocedures,incidentresponseplaybooks,andoperationaldocumentation.

  • Evaluateemergingattacktechniquesandassesstheorganization'sabilitytodetectandrespondtothem.

  • AnalyzesecurityactivityacrossWindows,Linux,ActiveDirectory,cloudenvironments,andenterprisenetworks.

  • Contributetosecurityinitiativesthatimproveoperationalresilience,responseefficiency,andoverallcybersecuritymaturity.


Requirements

AreYouAnExperiencedSOCAndIncidentResponseProfessionalReadyToMakeAnImpact?

  • 4+yearsofprofessionalcybersecurityexperience,preferablyinvolvinghands-onSOCoperations,incidentresponse,threathunting,ordigitalforensics.Candidateswith5–7yearsofrelevantexperienceareparticularlyalignedwiththerole.

  • Demonstratedexperienceinvestigatingsecurityalerts,analyzingsuspiciousactivity,andrespondingtocybersecurityincidents.

  • Strongunderstandingofenterprisesecuritymonitoringtechnologies,includingSIEM,EDR,NDR,XDR,andUEBA.

  • WorkingknowledgeoftheMITREATT&CKframework,cyberkillchainmethodology,andcommonattackertechniques.

  • ExperienceinvestigatingsecurityeventsinvolvingWindows,Linux,ActiveDirectory,andcloudtechnologies.

  • Knowledgeofnetworksecurityconcepts,includingfirewalls,proxyservers,emailsecurity,andnetworktrafficanalysis.

  • Abilitytodistinguishgenuinesecuritythreatsfromfalsepositivesandrecommendimprovementstodetectionlogic.

  • Familiaritywiththreathuntingmethodologies,digitalforensics,andincidentresponseprocedures.

  • Stronganalyticalandtroubleshootingskillswiththeabilitytoinvestigatecomplextechnicalissuesindependently.

  • Excellentwrittenandverbalcommunicationskills,particularlywhendocumentinginvestigationsandcommunicatingtechnicalfindings.

  • Abilitytoprioritizecompetingincidentsandresponsibilitiesinafast-pacedsecurityoperationsenvironment.

  • Self-motivated,detail-oriented,andcommittedtocontinuouslearningandcybersecurityimprovement.

  • ProfessionalcertificationssuchasGCIH,GNFA,GCFA,CEH,OSCP,CISSP,orcomparablecredentialsareadvantageousbutnotrequired.


Work permits
United States
Timezones
United States
Experience
4+ years

Categories

Skills

We use cookies

We use cookies to understand how this board is used and to improve it. Analytics run only if you accept. Cookie Policy