Senior Analyst, Information Security

About the role

At Norton Rose Fulbright, people thrive because of a shared commitment to quality, unity and integrity. The highly regarded law firm consistently receives recognition from Great Place to Work and Top Workplaces, two companies that specialize in assessing organizational culture. Teams collaborate across regions, value new ideas and deliver meaningful client solutions, supported by a culture that embraces ambition, development and shared success. With more than 3,000 lawyers and 3,000 business services professionals working together across 50 offices worldwide, this global law firm provides a full range of legal services to leading corporations and financial institutions operating in key markets and sectors. The Senior Information Security Analyst is one of several senior analyst roles within the Firm’s global Security Operations (SOC) team. Each Senior Analyst provides technical leadership in the SOC’s day-to-day monitoring, detection and response activities, hunts for emerging adversary activity, and continuously improves the Firm’s ability to detect and respond to threats at speed. The role is part of a worldwide team empowered to operate the activities within its assigned function. Daily activities focus on security monitoring, event and incident triage, incident response, request management, detection engineering and proactive threat hunting, with direction provided by the Information Security Manager.

Responsibilities

• Operate and manage security incidents and requests to SLA guidelines, acting as an intermediate escalation point for complex investigations.
• Monitor, triage and investigate alerts across endpoints, cloud, identity, email and network telemetry, reviewing and escalating unusual event behavior.
• Lead structured incident response aligned to a recognized lifecycle, including containment, eradication, recovery, evidence preservation and digital forensic analysis as authorized.
• Triage and remediate phishing, vishing and impersonation attacks in a timely and efficient manner as the risk dictates.
• Configure and tune appropriate security parameters in monitoring systems and act as a technical point of escalation for alerted issues.
• Conduct proactive, hypothesis-driven threat hunting on a scheduled basis to identify adversary activity not