Sr. IT Security Analyst

About the role

As a Senior Information Security Analyst supporting the Yum! Cybersecurity team, you will serve as the primary escalation point for the Security Information and Event Management (SIEM) platform and the Security Operations Center (SOC). This is a global role within the world’s largest restaurant company, serving over 53,000 restaurants and infrastructure, systems, and cloud solutions across 150+ countries.

Responsibilities

• Respond to, research, and address network security events using in-depth technical knowledge to enhance the security posture of internal systems and third-party solutions.
• Investigate network security events, document findings in writing via ticketing system, and communicate with stakeholders to resolve issues.
• Gather and analyze intelligence from various sources and communicate summaries to internal stakeholders.
• Identify tuning opportunities and additional SIEM rules/use cases based on the threat landscape and organizational needs.
• Provide threat and vulnerability management oversight, clearly communicating observations to leaders and subject matter experts.
• Collaborate with other Subject Matter Experts to deliver a unified security service experience and leverage expertise to improve processes.
• Work with the Log Collection and Platform Management team to identify and implement automations for common use cases to enhance response and resolution.
• Lead brand collaboration calls to discuss detections, resolution statuses, and follow-up actions, ensuring thorough documentation and resolution of events.
• Communicate effectively with technical, non-technical, and executive leadership through effective communication, report writing, and presentations.

Requirements

• 1 to 3 years’ experience in a high-performance Cyber SOC team in cybersecurity.
• College Degree in Cyber Security or Information Technology or equivalent work experience.
• Certifications like CCNA, Security+, Network+, GCIH, GSOC, GSEC, GSED, GMON, focused on organizations serving large-scale enterprise customers.
• Working knowledge in network access control, intrusion prevention & detection systems, firewalls, routers, incident response, information security methods & risk management.
• Experience with an enterprise-grade SIEM platform (e.g. QRadar, LogRhythm, CrowdStrike).
• Experience in high volume environments handling billions of records per day.
• Experience in Security Event analysis & triage, incident handling & root-cause identification.
• Proficiency in TCP/IP & other network protocols.
• Passion and enthusiasm for Cyber Security.
• Experience with Red/Blue team exercises & Table Top exercises.
• Experience running of one or more services within a Security Operations Center.
• Effective time management & problem-solving skills.
• Excellent communication skills, including verbal, report writing, and presentations.

Qualifications

• Passion and enthusiasm for Cyber Security.
• Experience with Red/Blue team exercises & Table Top exercises.
• Experience running of one or more services within a Security Operations Center.
• Effective time management & problem-solving skills.
• Excellent communication skills, including verbal, report writing, and presentations.

Skills

• Thorough understanding of the Cyber Kill Chain.
• Ability to work in a dynamic, global environment.
• Strong analytical and interpretive skills.
• Experience in high-volume environments handling billions of records per day.
• Experience in Security Event analysis & triage, incident handling & root-cause identification.
• Proficiency in TCP/IP & other network protocols.
• Experience with enterprise-grade SIEM platforms.
• Experience with network access control, intrusion prevention & detection systems, firewalls, routers, incident response, information security methods & risk management.
• Experience in high volume environments handling billions of records per day.
• Experience in Security Event analysis & triage, incident handling & root-cause identification.
• Proficiency in TCP/IP & other network protocols.
• Experience with enterprise-grade SIEM platforms.
• Experience with network access control, intrusion prevention & detection systems, firewalls, routers, incident response, information security methods & risk management.

Benefits

• Medical, dental, vision, legal, and accidental death and dismemberment insurance.
• FSA/HSA (depending on enrolled medical plan).
• Short-term disability, long-term disability, and life insurance.
• 401(k) plan.
• 4 weeks of vacation, paid sick leave, 10 paid holidays, a floating day off, and 2 paid days for volunteer time each calendar year.

Pay

The salary range for this position is $--100,500 to $115,800 annually, with bonus eligibility. Ultimately, the pay will be determined based on location, experience, and other job-related factors.