Security Analyst

About the role

This role is responsible for leading complex alert investigations, validating and responding to security incidents, and supporting real-time decision-making during high-severity events.

Responsibilities

• Investigate, validate, and triage security alerts to identify and respond to security incidents, escalating confirmed or high-risk activity in accordance with Threat Response procedures.
• Lead in-depth analysis of host, network, log, file, and identity data to determine incident scope, root cause, and potential impact.
• Coordinate with incident response partners and technical teams to support containment, remediation, and recovery actions during active security incidents.
• Provide real-time analytical input to Threat Response leadership during high-severity or time-sensitive incidents to support rapid decision-making.
• Ensure all investigations, actions, and outcomes are accurately documented in case management systems to meet operational, audit, and legal requirements.
• Mentor and support junior Threat Response analysts by reviewing investigations, providing guidance on analysis techniques, and reinforcing consistent investigation standards.
• Maintain a strong understanding of the Edward Jones environment, common attack patterns, and adversary techniques relevant to Threat Response operations.
• Contribute to continuous Threat Response improvement by identifying gaps in alerting, investigation workflows, and response procedures based on incident experience.
• Participate in incident after-action reviews and exercises, providing operational insights and recommended improvements to Threat Response processes.
• Maintain proficiency in SOC tooling, including SIEM platforms (e.g., Splunk, Microsoft Sentinel, LogRhythm) and case management/orchestration tools (e.g., ServiceNow, Swimlane, XSOAR).

Requirements

• Bachelor's degree in information systems or related field preferred, or equivalent work experience.
• Minimum of 3 years Information Systems Security experience, or 5 years of Information Technology experience with a focus on security controls and processes.
• Experience performing routine host, vulnerability, network, file, and log analysis from a variety of sources and platforms to support the incident response, threat detection, and hunt lifecycles.
• Experience properly documenting/tracking all security investigations and work to meet department, audit, and legal requirements.
• Maintain knowledge and understanding of current security threats and vulnerabilities and of how threat actors execute common attack paths. Ensure timely and accurate collection of this threat intelligence data for analysis and reporting purposes.
• Contribute to the team's processes and documentation by suggesting opportunities to incorporate industry best practices and lessons learned from previous events.
• Participate in after-action reviews for security incidents and red team exercises.
• Effectively communicate with peers and leadership to ensure awareness of progress and challenges.

Qualifications

• Must be able to work in the office four days per week effective June 1, 2026. Before June 1, 2026, must be able to work in the office three days per week, with preference for Tuesday through Thursday.

Skills

• Strong analytical and problem-solving skills.
• Excellent communication and collaboration abilities.
• Proficiency in SOC tooling, including SIEM platforms and case management/orchestration tools.

Benefits

• Medical and prescription drug, dental, vision, voluntary benefits, short- and long-term disability, basic life, and basic AD&D coverage.
• Tax-advantaged accounts: health savings account, and flexible spending account.
• 401(k) retirement plan.
• 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism.
• Eligibility for bonuses and profit sharing.
• Employee Assistance Program.

Pay

Compensation provided for using, not obtaining, the rating.

Schedule

Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week effective June 1, 2026. Before June 1, 2026, candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office three days per week, with preference for Tuesday through Thursday.

Edward Jones is an Equal Opportunity Employer

We are committed to creating a diverse environment and encouraging applications from individuals of all backgrounds.