Senior Cybersecurity Associate

Responsibilities

• Operations, process improvement, and optimization of security tools, including but not limited to Azure Security (DLP, Compliance), Microsoft Defender (Endpoint, Cloud, Email), Rapid 7 (Vulnerability Management, SIEM) and Cisco Umbrella solutions.
• Evaluate, analyze, and deploy security technologies to enhance the organization's overall security posture and recommend additional tools or technologies that may be appropriate to extend program robustness.
• Lead and participate in incident response activities, investigating security incidents and implementing corrective actions.
• Collaborate with teams to develop and implement proactive measures to mitigate potential security threats.
• Develop and maintain scripts to automate security processes and tasks. Integrate security solutions into existing workflows for improved efficiency.
• Operate vulnerability management program and coordinate vulnerability remediation efforts with respective technology teams.
• Threat Hunting: Actively search for unknown and ongoing cyber threats that could exist within our enterprise; and identify proactive measures to remediate. This includes developing processes and mentoring junior staff to support activities.
• Emerging Threats: leverage public and proprietary threat intelligence feeds to identify new and emerging threats that we must prepare to defend against.

Qualifications

• A four-year college degree or equivalent industry training and certifications (e.g., CEH, CISM, CompTIA Security+, CISSP, GSEC).
• Six to ten+ years of experience in a security analyst or related position; preferably within the financial services industry.
• Strong understanding of Microsoft’s enterprise technology platform, including Azure, Active Directory, SQL, Office365, and the Windows server and desktop operating systems.
• Familiarity with industry frameworks, such as NIST, CIS-18 and ISO.
• Demonstrated expertise in managing security tools (SIEM, DLP, SOAR, IAM, EndPoint, IDPS).
• In-depth experience administering vulnerability management solutions such as Nessus, Qualys, Rapid7, or similar.
• Strong analytical and critical thinking skills and the ability to organize work in a logical, thorough, and succinct manner.
• Strong scripting and automation skills (Python, PowerShell, etc.).
• Highly self-motivated, results-orientated, and self-directed to handle multiple ongoing tasks.
• Flexibility to adapt to changing assignments and ability to effectively prioritize.
• Effective written and verbal English communication at all levels.
• Demonstrated ability to operate and innovate in a small team with a fast-paced environment, balancing both strategic and tactical needs.

Preferred Qualifications

• Preferred certifications: CEH, CISM, CompTIA Security+, CISSP, GSEC.

Pay

This position is exempt and is paid according to the laws of the State of Illinois. The pay range for this position is $95,000-140,000 USD per year.

Physical Requirements

This position requires the physical capabilities to work in an office environment, which may include prolonged periods of sitting at a desk and working on a computer.

U.S. Eligibility Requirements

• Must be 18 years of age or older.
• Must have unrestricted work authorization to work in the United States.
• Must be willing to execute Corient’s Employee Agreement or Confidentiality and Non-Disclosure Agreement, which require, among other things, post-employment obligations relating to non-solicitation, confidentiality, and non-disclosure.