Cyber Monitoring & Incident Response Senior Associate

Are you ready to make an impact at DTCC? Work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development. DTCC is at the forefront of innovation in the financial markets, committed to helping employees grow and succeed. We foster a thriving internal community and create a workplace that reflects the diversity of the world we serve.

About the role

The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential infrastructure capabilities to meet client needs and implementing data standards and governance.

As a member of the CISO team reporting to a Cyber Monitoring & Incident Response Manager, you will detect, analyze, and respond to cyber security events. As a technical lead, you will oversee detection, investigation, and response to cyber security events, act as Incident Commander for serious incidents, and may be required to respond outside normal work hours. You will also lead programs, improve team performance, and mentor junior staff.

Responsibilities

• Monitor, detect, analyze, research, and respond to cyber security events including network events, OS log events, and forensic information.
• Act as an escalation point for junior team members.
• Lead and coordinate major investigations and incident response activities.
• Act as Incident Commander for serious incidents.
• Perform eDiscovery and other technical tasks.
• Independently lead technical programs and large projects.
• Train and mentor junior staff members.
• Work with management and QA/QC lead to improve team performance.
• Collaborate with the Content Development Team to implement content and tune security platforms.
• Work with stakeholders from other business units to conduct investigations, review plans and procedures, and respond to cyber incidents.
• Participate in training, exercises, and process improvement programs.
• Occasionally travel to conferences, training, and other DTCC offices (up to 10%).
• Participate in on-call rotation and occasional after-hours work.
• Create messaging, socialize programs, and evangelize security at DTCC.

Requirements

• Minimum of 6 years of related experience.
• Bachelor’s degree preferred and/or equivalent experience.
• At least three (3) years of previous experience as a SOC analyst or similar technical role.
• Strong grasp of forensic interpretation of data.
• Ability to research and mentor team members on interpreting OS log files, network logs, flow data, and other security data.
• Experience successfully leading technical projects and complex incidents requiring collaboration with multiple people.
• Tactical leadership of teams to accomplish technical tasks and projects.
• Ability to produce written reports including detailed analysis and recommendations.
• Ability to convey complex technical concepts to both technical and non-technical audiences.
• Subject matter expertise in a particular technology or security domain, with hands-on experience and knowledge of modern security tools and DFIR best practices.
• Ability to take minimal high-level requirements and independently produce and execute an action plan.
• Ability to independently prioritize and manage multiple tasks.
• Strong desire to achieve and contribute to a high-performing team.

Pay and Benefits

• Competitive compensation, including base pay and annual incentive.
• Comprehensive health and life insurance and well-being benefits, based on location.
• Pension/retirement benefits.
• Paid Time Off and Personal/Family Care, and other leaves of absence to support physical, financial, and emotional well-being.

Schedule

DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays, and a third day unique to each team or employee).