Sr. Cyber Security Analyst

Job Summary

The Sr. Cyber Security Analyst will play a key role in protecting SMBC Group by helping detect, investigate, and respond to cyber threats. They will work within the Security Operations Center (SOC) to strengthen monitoring, incident response, threat hunting, and detection capabilities across a global technology environment.

Principal Duties And Responsibilities

• Monitor, investigate, and respond to security alerts, incidents, and suspicious activity across the enterprise.
• Lead technical investigations to determine root cause, assess impact, and support containment and remediation efforts.
• Conduct proactive threat hunting activities to identify emerging threats and security gaps.
• Maintain and enhance monitoring, detection, and incident response playbooks and procedures.
• Partner with detection engineering and security automation teams to improve visibility, reduce false positives, and strengthen response processes.
• Evaluate adversary tactics, techniques, and procedures (TTPs) and validate the organization's ability to detect and respond to them.
• Support the implementation, management, and optimization of security tools and platforms.
• Contribute to projects and initiatives that improve SOC operations, incident response capabilities, and overall security maturity.

POSITION SPECIFICATIONS

• 5+ years of cybersecurity experience, preferably in a SOC, CSIRT, DFIR, or incident response environment.
• Experience investigating security incidents and analyzing complex threat activity.
• Experience documenting investigations, findings, and recommendations clearly and accurately.
• Strong understanding of security monitoring, incident detection, investigation, containment, and response processes.
• Knowledge of the MITRE ATT&CK framework, Cyber Kill Chain, and related threat analysis methodologies.
• Experience working with security technologies such as SIEM, EDR, NDR, XDR, and UEBA platforms.
• Strong knowledge of Windows and Linux operating systems.
• Experience with Active Directory and identity-related security concepts.
• Working knowledge of cloud technologies and cloud security principles.
• Strong analytical, problem-solving, and organizational skills.
• Strong verbal and written communication skills.
• Able to manage multiple priorities and work effectively in a results-focused environment.
• Able to work independently and make sound decisions during security investigations.

NICE TO HAVE

• Experience in threat hunting, digital forensics, purple teaming, detection engineering, security automation, or threat intelligence.
• Experience developing or tuning security detections and response workflows.
• Professional certifications such as GCIH, GNFA, GCFA, CEH, OSCP, CISSP, or equivalent.
• Experience working in a global enterprise or highly regulated environment, including financial services.