Senior Cybersecurity Analyst – SOC, Incident Response & Threat Hunting

About this role

BePartOfAHigh-PerformingTeam

Joinaglobalfinancialservicestechnologyorganizationdedicatedtoprotectingcriticalbankingsystems,sensitiveinformation,andenterpriseinfrastructureagainstevolvingcyberthreats.Theorganizationoperatesinahighlyregulatedenvironmentwherecybersecurity,operationalresilience,andcontinuousimprovementareessentialtobusinesssuccess.
ThisopportunitysitswithinanestablishedSecurityOperationsCenter(SOC),workingalongsidecybersecurityspecialistsfocusedonthreatdetection,incidentresponse,digitalforensics,andproactivesecurityoperations.Theteamemphasizestechnicalinvestigation,collaboration,andinnovation,leveragingadvancedsecuritytechnologiestostrengthendefensesandimprovetheeffectivenessofenterprisesecuritymonitoring.
What'sInStoreForYou

• Remoteworkopportunitysupportingenterprisecybersecurityoperations.

• Engagement:W2only(noC2C/1099).

• WorkwithanexperiencedSOCteamresponsibleforprotectingacomplexfinancialservicesenvironment.

• Gainexposuretoadvancedsecuritymonitoring,threathunting,incidentresponse,andsecurityautomationtechnologies.

• Collaboratewithspecialistsacrossdetectionengineering,incidentresponse,andsecurityautomation.

• Contributetocontinuousimprovementsincybersecurityprocesses,detectioncapabilities,andoperationalefficiency.

HowYouWillMakeAnImpact

• Investigatecybersecurityalertsandsuspiciousactivitytodeterminepotentialthreats,assessseverity,identifyrootcauses,andcoordinateappropriateresponses.

• Performdetailedincidentinvestigations,includinganalyzingattackerbehavior,identifyingcompromisedassets,andreconstructingsecurityevents.

• Conductproactivethreathuntingacrossenterprisesystemstoidentifysuspiciousbehaviorthatmayhavebypassedexistingsecuritycontrols.

• ApplytheMITREATT&CKframeworkandcyberkillchainconceptstoanalyzeadversarytactics,techniques,andprocedures(TTPs).

• LeverageSIEM,EDR,NDR,XDR,andbehavioralanalyticstechnologiestoinvestigatethreatsandimprovedetectioneffectiveness.

• Partnerwithdetectionengineeringteamstoidentifymonitoringgaps,reducefalsepositives,andenhancesecurityalertingcapabilities.

• Collaboratewithsecurityautomationspecialiststostreamlinerepetitiveinvestigationandresponseactivities.

• Supportdigitalforensicinvestigationsandcontributetechnicalfindingsduringcybersecurityincidents.

• Develop,maintain,andimproveSOCinvestigationprocedures,incidentresponseplaybooks,andoperationaldocumentation.

• Evaluateemergingattacktechniquesandassesstheorganization'sabilitytodetectandrespondtothem.

• AnalyzesecurityactivityacrossWindows,Linux,ActiveDirectory,cloudenvironments,andenterprisenetworks.

• Contributetosecurityinitiativesthatimproveoperationalresilience,responseefficiency,andoverallcybersecuritymaturity.

Requirements
AreYouAnExperiencedSOCAndIncidentResponseProfessionalReadyToMakeAnImpact?

• 4+yearsofprofessionalcybersecurityexperience,preferablyinvolvinghands-onSOCoperations,incidentresponse,threathunting,ordigitalforensics.Candidateswith5–7yearsofrelevantexperienceareparticularlyalignedwiththerole.

• Demonstratedexperienceinvestigatingsecurityalerts,analyzingsuspiciousactivity,andrespondingtocybersecurityincidents.

• Strongunderstandingofenterprisesecuritymonitoringtechnologies,includingSIEM,EDR,NDR,XDR,andUEBA.

• WorkingknowledgeoftheMITREATT&CKframework,cyberkillchainmethodology,andcommonattackertechniques.

• ExperienceinvestigatingsecurityeventsinvolvingWindows,Linux,ActiveDirectory,andcloudtechnologies.

• Knowledgeofnetworksecurityconcepts,includingfirewalls,proxyservers,emailsecurity,andnetworktrafficanalysis.

• Abilitytodistinguishgenuinesecuritythreatsfromfalsepositivesandrecommendimprovementstodetectionlogic.

• Familiaritywiththreathuntingmethodologies,digitalforensics,andincidentresponseprocedures.

• Stronganalyticalandtroubleshootingskillswiththeabilitytoinvestigatecomplextechnicalissuesindependently.

• Excellentwrittenandverbalcommunicationskills,particularlywhendocumentinginvestigationsandcommunicatingtechnicalfindings.

• Abilitytoprioritizecompetingincidentsandresponsibilitiesinafast-pacedsecurityoperationsenvironment.

• Self-motivated,detail-oriented,andcommittedtocontinuouslearningandcybersecurityimprovement.

• ProfessionalcertificationssuchasGCIH,GNFA,GCFA,CEH,OSCP,CISSP,orcomparablecredentialsareadvantageousbutnotrequired.

Originally posted on Himalayas