Staff Security Analyst

Key Responsibilities & Duties

• Lead complex incident response activities, including containment, eradication, recovery, and post-incident improvements.
• Design, implement, and mature enterprise threat detection capabilities using SIEM analytics, endpoint detection, cloud monitoring, behavioral analytics, and automated response workflows.
• Conduct proactive threat hunting to identify advanced attacker behaviors, emerging threats, and indicators of compromise.
• Develop and maintain enterprise detection engineering standards, playbooks, tuning methodologies, and quality practices.
• Partner with Security Engineering, Infrastructure, Cloud Engineering, Identity, and Application Security teams to strengthen security controls and reduce organizational risk.
• Evaluate emerging threats, adversary techniques, threat intelligence, and detection technologies to improve monitoring and response capabilities.
• Develop automation and orchestration workflows to improve operational efficiency and response speed.
• Establish and report on operational metrics related to detection effectiveness, incident response performance, and security operations maturity.
• Advise technology teams on monitoring strategies, logging requirements, incident readiness, and detection coverage.
• Mentor Security Analysts through technical guidance, investigation reviews, and knowledge sharing.
• Contribute to enterprise security strategy, architecture reviews, and long-term cybersecurity planning.
• Collaborate with Risk, Compliance, Internal Audit, and Legal teams to support regulatory, customer, and audit requirements.
• Research emerging attack techniques, AI-enabled threats, and evolving security operations technologies to continuously enhance security capabilities.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or an equivalent combination of education and relevant experience.
• 6–10 years of experience in security operations, threat detection, incident response, digital forensics, cybersecurity engineering, or a related information security discipline, including broad experience leading complex enterprise security investigations and detection engineering initiatives across multiple technology domains.
• Advanced incident response leadership and threat detection engineering.
• Expertise with SIEM, endpoint detection and response, cloud security monitoring, identity monitoring, and email security platforms.
• Advanced threat hunting, digital forensics, malware analysis, and adversary behavior analysis.
• Expert knowledge of MITRE ATT&CK, threat intelligence, detection engineering, and incident response frameworks.
• Security automation, orchestration, and operational workflow optimization.
• Ability to lead complex cross-functional security investigations and influence technical stakeholders.
• Strong analytical, investigative, and executive communication skills.
• Ability to independently solve highly complex operational security challenges.