Lead SOC Analyst

We’re the world’s leading provider of secure financial messaging services, headquartered in Belgium. We are the way the world moves value – across borders, through cities and overseas. No other organisation can address the scale, precision, pace and trust that this demands, and we’re proud to support the global economy. We’re unique too: established to find a better way for the global financial community to move value – a reliable, safe and secure approach that the community can trust, completely. We’re always striving to be better and are constantly evolving in an ever-changing landscape, without undermining that trust.

About the role

The Cyber Fusion Centre (CFC) is looking for a Lead SOC (Security Operations Center) Analyst to join our team. This team is responsible for the prevention of Cyber Security incidents by monitoring, detection, and response to potential intrusions in real time within the Swift network. As a Lead SOC Analyst, you will provide input to security strategy and control of systems, networks, physical infrastructure, people and information. You will participate in the design, communication and execution of policies, controls, and procedures as appropriate for Swift and its customers, consistent with company objectives, reputation, and regulatory requirements. In this role, you will act as an operational mentor, coaching junior members within the team.

Swift is unable to sponsor an employment authorization for this position now or in the future.

Responsibilities

• Lead the creation and operationalization of a formalized Threat Hunting program within the SOC
• Participate in a 24x7 SOC; occasional shift work is required for this position. Shift work typically includes one week per month Monday - Sunday, 11 AM - 7 PM and occasional holiday work; all other hours are standard working hours
• Provide expertise & guidance to less senior team members
• Support Incident Response (IR) and Threat Detection development activities and report to Senior Management ensuring proper awareness and ownership
• Support the introduction and implementation of new capabilities and IR processes and procedures within the Cyber Fusion Centre
• Interact closely with Swift's Red Team to further enhance detection capabilities
• Lead and participate in IR simulation exercises from a blue team perspective
• Perform proper triage identification and scoping of incidents including identification, investigation, and follow-up of containment actions
• Participate in the identification, development and communication of IOCs
• Participate in the identification and coordination of eradication and remediation actions with various stakeholders and ensure timely follow-up
• Enhance and tune tools for efficiently managing large collections of security events
• Stay abreast of changing technologies, emerging cyber threats and attack methodologies

Requirements

• Bachelor's degree in Computer Science, IT, or related field
• 8+ years of related working experience in a SOC, Incident Response, or Threat Hunting role
• Experience performing or leading threat hunting activities
• Experience with cloud technologies such as Azure, Google Cloud, or AWS
• Experience with security tools such as SIEM, IDS/IPS, EDR/XDR, SOAR, etc.
• Ability to learn in a fast-paced, multi-dimensional, technical environment
• Strong verbal and written communication and the ability to concisely and accurately document technical investigations

Preferred Qualifications

• Familiarity with Scripting languages such as PHP, Perl or Python and databases such as MySQL, and knowledge of Unix and Windows
• Security certifications such as GIAC GCIA/GCIH, CISSP, or other relevant certifications
• Knowledge of penetration testing and vulnerability assessment capabilities and tools

Pay

The estimated salary range for a new hire in this position in Virginia is $121,564.00 USD Annual MINIMUM to $225,762.00 USD Annual MAXIMUM. Salary may vary depending on job-related factors which may include knowledge, skills, experience, and location.

Benefits

• Competitive base salary and bonus opportunity contingent on personal and company performance
• Medical, dental, vision and life insurance with no premium costs for employees and their families
• Retirement plan plus matching 401k