Senior Analyst, Cybersecurity Operations & Response

About the role

The Senior Analyst, Cybersecurity Operations & Response supports the execution and continuous improvement of the Firm’s Cybersecurity Operations & Response program. This role assists with security operations, incident response activities, and threat and vulnerability management initiatives.

Responsibilities

• Support the day-to-day operation and execution of the Firm’s Cybersecurity Operations & Response program.
• Aid in the administration and continuous improvement of the Firm’s threat and vulnerability management program.
• Develop, maintain, and update associated playbooks, policies, standards, and procedural documentation.
• Participate in cyber event response activities, including investigation, containment, remediation, and recovery efforts.
• Serve as a primary resource for security operations monitoring and incident triage activities.
• Perform threat and vulnerability assessments and assist with remediation efforts to ensure systems are protected from known and potential threats.
• Maintain security tools and alerts to identify, analyze, and escalate potential security incidents.
• Develop and distribute reporting and metrics related to security operations, incidents, vulnerabilities, and overall program effectiveness.
• Collaborate with internal teams and third-party providers to support security initiatives and operational improvements.
• Participate in an on-call rotation and be available to respond to cybersecurity incidents and operational issues outside of normal business hours, as needed.

Qualifications

• Bachelor’s degree in information security or an equivalent combination of work and education required.
• Minimum of five years of information security experience required, including some direct experience with security operations, incident response, and threat/vulnerability management.
• Knowledge of information security principles, including security operations, incident response, and threat and vulnerability management.
• Experience in developing, documenting, and maintaining security procedures including security response playbooks.
• Experience in developing, managing, and executing a threat and vulnerability management program.
• Strong analytical and problem-solving skills to enable effective security event and problem resolution.
• Ability to work well under minimal supervision.
• Strong written and verbal communication skills.
• Strong customer/client focus, with the ability to manage expectations appropriately, provide a superior customer/client experience, and build long-term relationships.

Skills

• Knowledge of NIST and MITRE ATT&CK frameworks.

Benefits

(Note: No specific benefits section provided in the job posting.)

Pay

(Note: No specific pay details provided in the job posting.)

Schedule

(Note: No specific schedule details provided in the job posting.)