Threat Intelligence Specialist

• Build and maintain behavior-based detections that identify adversary activity through sequences, relationships, and deviations across identity, endpoint, cloud, network, and application telemetry.
• Translate attacker techniques, malware behaviors, and adversary tradecraft into testable, explainable, and durable detection logic using a detection-as-code approach.
• Define telemetry, enrichment, and normalization requirements needed to improve signal quality, close coverage gaps, and support scalable detection outcomes in a cloud environment.
• Apply statistical methods, machine learning techniques, and Python-based analytical workflows to develop behavioral models, engineering features, and improve precision detection and operational actionability.
• Validate suspicious behaviors using digital forensics and incident response methods to distinguish malicious activity from benign anomalies, misconfigurations, and expected operational patterns.
• Partner with security operations, incident response, and detection engineering teams to operationalize detections with triage guidance, severity rationale, playbook alignment, and MITRE ATT&CK classification and coverage reporting.
• Use external threat intelligence as prioritization context while ensuring detections are grounded in observable behavior and telemetry within the enterprise environment.

Cyber Threat Hunter

Security Analyst

• Support all phases of the intelligence lifecycle — planning, collection, analysis, production, and dissemination — under the guidance of senior analysts.
• Research known threat actors and groups, mapping observed Tactics, Techniques, and Procedures (TTPs) to the MITRE ATT&CK framework to help identify potential gaps in current defenses.
• Monitor open sources, industry feeds, and relevant forums to contribute to "big picture" reporting on how the threat environment is evolving.
• Collect and help validate technical Indicators of Compromise (IOCs) from malware reports and OSINT sources to support blocklist hygiene and reduce noise.
• Proactively research and collect threat intelligence from open-source intelligence (OSINT), commercial feeds, and internal security data.
• Assist in producing written reports, including Flash Alerts for urgent threats and contributions to monthly blogs or executive summaries.
• Monitor vulnerability disclosures and exploit trends, surfacing relevant findings for review and escalation.
• Work alongside technical teams (e.g., Incident Response, SOC) and help communicate threat findings to non-technical stakeholders in plain language.

Threat Intelligence Analyst

• Own the day-to-day security operations for a HIPAA-regulated, cloud-only environment
• Harden Microsoft security stack, run incident response, hunt threats, and build the security program
• Investigate alerts, tune detections, close gaps in Conditional Access, ensure compliance posture
• Manage and refine Conditional Access policies, administer Privileged Identity Management (PIM)
• Harden Exchange Online Protection and own email authentication projects
• Write and tune KQL queries in Microsoft Defender Advanced Hunting and triage alerts
• Implement Microsoft Purview information protection labels, DLP policies, and retention rules
• Execute posture improvement roadmaps with external Microsoft security partner

Cybersecurity Analyst

• Appropriately scope, research, and prepare competitive intelligence reports and analysis in response to specific target opportunities
• Conduct Competitive Intelligence research on law firms, industries, clients, and market trends
• Develop Intelligence Briefs (Company Level) and Industry Briefs (Market/Industry Level) by researching individual companies and markets/industries then synthesizing results into summary form, including: company overview and areas of opportunities, industry overview and trends, key contacts and market segments, prospect lists by industry, transactions lists
• Demonstrate ability to transform complex data into actionable business insights through the analysis of large datasets and the effective use of data analytics tools such as Excel and Power BI
• Apply AI-powered research and business intelligence tools to strengthen research capabilities and identify emerging trends and opportunities
• Locate market information for development of client and target lists
• Exercise judgment and accountability in meetings or communicating effectively around deadlines
• Perform highly reliable quantitative and qualitative analysis, projections and plans, presenting interpretations and recommendations to senior management
• In collaboration with senior information professionals, develop strategic advice on how best to leverage internal and external resources to address challenges faced by the firm and its attorneys
• Proactively track Holland & Knight's competitive position in geographic locations, industries and practices
• Develop an understanding of each section and practice group’s targets, needs, and goals; assisting with materials and information to help shape plans and competitive positioning
• Grow individual subject matter expertise (SME) in the legal competitive intelligence field, maintaining some knowledge of trends and industry developments
• Establish and maintain an understanding of the information needs, workflow, and preferences of users and stakeholders in order to support and improve ease of access to information
• Attend research training, legal vendor training, knowledge sharing sessions, and other continuing education toward maintaining highest quality service output
• Support the firm's information resource stewardship; complying with all information security, privacy, confidentiality and licensing requirements while educating all users on the same
• Expected to maintain a regular and predictable work schedule and full attention to and engagement in work activities on behalf of the firm during business hours unless otherwise approved or required by applicable law
• Special projects and duties as assigned

Competitive Intelligence Analyst

• Operationalize the Intel Lifecycle: Execute the full intelligence lifecycle to perform fusion analysis, develop adversary profiles focused on financial sector threats, produce finished intelligence products across tactical, operational, and strategic levels.
• Tactical Detection Support: Contextualize threat behavior and anticipate adversary actions, translate analyzed TTPs into technical signatures to directly support the SOC and Detection Engineering teams.
• Intelligence-Driven Threat Hunting: Collaborate with the Threat Hunting team to develop hypotheses based on observed adversary behaviors and regional trends, moving beyond simple Indicator of Compromise (IoC) matching.
• Threat and Vulnerability Context: Support attack surface management team, provide intelligence-driven vulnerability prioritization, identify emerging threats and exploitation trends.
• Adversary Emulation: Provide intelligence support for Red Team or Purple Team exercises by profiling relevant threat actors to ensure testing remains realistic and impactful.
• Strategic & Geopolitical Analysis: Analyze global conflicts and economic stability to translate complex threat activities into structured business solutions and "so-what" summaries for leadership.
• Program Development and Engagement: Contribute to the maturation of the CTI program by developing and refining collection requirements, intelligence workflows, reporting templates, and analytic tradecraft standards.
• Production and Reporting: Produce high-quality tactical, operational, and strategic intelligence products including daily threat briefings, threat actor profiles, vulnerability assessments, and executive threat summaries. Deliver timely and actionable intelligence to internal stakeholders.

Cyber Threat Intelligence Analyst

• Support the development, implementation, and monitoring of security policies and controls
• Collaborate with Global Security to ensure alignment with enterprise security standards and frameworks
• Investigate security incidents and collaborate with internal teams for effective resolution
• Coordinate post-incident reporting and remediation
• Partner with the Vulnerability Management team to drive vulnerability remediation, recommend controls, create playbooks
• Conduct periodic access reviews and report security access violations
• Create and deliver high-quality written communications on security, compliance, and audit issues
• Support internal security projects, automation efforts, and process improvements
• Adopt and extend AI-assisted security tooling to reduce toil, accelerate investigations, augment, and simplify recurring security workflows
• Collaborate with engineering teams to embed security best practices into the software development lifecycle (SDLC) and cloud environments
• Perform security assessments of new products and services to ensure the adequacy of security and privacy.

Senior Cyber Security Analyst

• Responsible for day-to-day support and optimization of software applications, including builds, upgrades, and system enhancements.
• Analyzes business / clinical needs, evaluates software releases and/or new products, and gives recommendations to optimize processes and decrease expenses.
• Performs and documents workflow assessments to determine functional requirements for optimal utilization of applications.
• Develops system test plans and performs testing of software upgrades and patches.
• Maintains a record of test progress and test results.
• Responsible for problem, incident, and change management and service requests.
• Provides daily on-call support to the customer base for application-related issues.
• Works within a cross-functional team and with end-users to achieve application integration to meet business / clinical needs.
• Responsible for the communication of software issues, requirements, upgrades, and enhancements.
• Oversees smaller-sized projects or components of projects.
• Coordinates implementation or project planning around software application releases.
• Key certification(s) or other credential(s) which is determined central to the systems or applications supported.
• Specializes in incident response, EDR, and SIEM.
• Helps protect sensitive patient and organizational data by proactively detecting, analyzing, and responding to cybersecurity threats.
• Ensures compliance with HIPAA and other healthcare regulations.
• Participates in a 24/7 on-call rotation to promptly respond to security incidents.

• Investigating security alerts from the Cynet platform in order to detect threats and conduct live incident response engagements
• Investigating and analyzing programs and software using analysis programs to identify threats and classify malware based on previous threats and commonalities
• Investigating and issuing threat intelligence and malware analysis report
• Identifying unknown threats for our global clients through advanced threat hunting services to complement the standard Security Operations Center services
• Performing analysis and forensics on security threats, malware and attacks in the wild, using industry standard platforms and tools

• support security operations, monitoring, and incident response activities
• leverage subject matter expertise gained through industry experience
• provide technical, managerial, and administrative support for problem definition, analysis, requirements development, and implementation of security solutions
• analytical and detail-oriented

• Lead the development of the Firm’s physical security intelligence program
• Integrate insights from multiple sources to assess the threat landscape
• Collaborate with various teams to enhance security measures
• Provide strategic advice to key stakeholders on security initiatives
• Drive actionable decisions that improve safety and security protocols
• Implement proactive measures to mitigate risks
• Translate complex analysis into clear recommendations for action
• Foster partnerships across the security organization to achieve objectives

Senior Security Intelligence Analyst

• Assist in assessing cryptographic posture across applications, platforms, and infrastructure
• Review and analyze data from security tools, inventories and assessments to identify gaps
• Support recurring cryptographic posture assessments and metrics used by security leadership
• Work with structured datasets related to cryptography and encryption controls
• Support analysis and planning activities related to cryptographic transitions

• Analyze and respond to cyber threats.
• Gain expertise in several cybersecurity technologies and defensive domains.
• Maintain partnerships with stakeholders and assist with end-to-end Incident Response remediation.
• Monitoring of technical security controls and detection technologies.
• Provide cybersecurity threat recommendations to stakeholders and decision makers.
• Leverage internal and external resources to research threats, vulnerabilities, and intelligence on various attackers and attack infrastructure.
• Be a responsive and helpful engagement point for technology teams during Incident Response activities.
• Assess internal and external networks to define and monitor Kemper’s attack surface.

• Developing and maintaining Threat Models
• Analyzing Threat Intelligence Data
• Mapping Threats to the Kill Chain and MITRE ATT&CK Framework
• Communicating Findings
• Collaborating with Security Teams
• Contributing to Threat Hunting Efforts
• Staying Current with the Threat Landscape
• Automating and Improving Modeling Processes

• Independently executing advanced incident triage, threat analysis, and technical investigations
• Performing advanced incident triage, validating complex alerts and prioritizing events based on risk to financial professionals
• Conducting intermediate threat analysis, including identifying attacker behavior
• Supporting Osaic Financial Professionals regarding suspicious activity, compromised accounts, secure configurations
• Demonstrating proficiency with Osaic’s security tools, including SIEM, EDR, identity security
• Ensuring all investigative actions align with Osaic policies, FINRA/SEC regulations
• Work closely with IT, Compliance, Identity & Access Management, and cybersecurity teams to coordinate responses

Security Analyst II

Incident Response Analyst

• Lead end-to-end incident response engagements within customer environments, driving rapid investigation, containment, and remediation of active threats
• Conduct deep-dive forensic and malware analysis to uncover adversary tactics, techniques, and procedures (TTPs), translating findings into actionable intelligence
• Proactively hunt for advanced threats through hypothesis-driven threat hunting across diverse data sources and telemetry
• Triage and validate suspicious activity using a combination of open-source intelligence (OSINT), proprietary intelligence, and behavioral analysis
• Own the documentation of incidents, ensuring clear, defensible reporting and timeline reconstruction within case management systems
• Identify and operationalize new adversary techniques, tools, and tradecraft—scaling knowledge across the team to strengthen collective defense
• Maintain a constant pulse on the evolving threat landscape, applying emerging intelligence to real-world investigations
• Surface visibility gaps in logging, telemetry, and detection coverage, and partner with stakeholders to enhance overall security posture
• Collaborate cross-functionally to develop and refine detection content, response playbooks, and threat intelligence outputs
• Serve as a trusted advisor to customers, confidently guiding them through the full incident response lifecycle—from initial compromise to full remediation and recovery

• Implementing information security controls and preventing hackers from infiltrating company information and jeopardizing programs.
• Administration of SIEM and Observability platforms
• Working with the user community to understand security needs.
• Proactively handles security vulnerabilities and responds to active threats

Senior IT Security Analyst

• Support incident handling processes across multiple platforms and security technologies including Windows, Linux and macOS
• Provide in depth analysis from escalated requests originating from Security Analyst 1
• Validate suspicious events by performing investigations using SIEM and SOAR technologies, leveraging Deepwatch proprietary tooling, intelligence and OSINT, TTPs and IOCs
• Identify gaps in customer environments, data ingested or configuration errors which reduce telemetry quality
• Work with customer and leadership to surface and resolve concerns
• Provide support to Security Analyst I including coaching and training as necessary
• Leverage your knowledge of Alert Triage, SOC Operations, and Defense in Depth (DiD) to contribute to projects for overall customer success
• Produce high-quality written and verbal communications, recommendations, and findings to customer management in a timely manner
• Surface opportunities for improvement in the SOC and for the customer and be a change agent for measurably improving our customer security posture and experience
• Continue to sharpen your skills and capabilities on the job, and through the Deepwatch development program

Security Analyst II – Weekday Afternoons

• Plan, design, and implement network, server, and storage infrastructure based on project requirements, capacity plans, and system support.
• Problem solving involves basic troubleshooting following the OSI (Open Systems Interconnection) model, making or calling for equipment repairs, and problem escalation.
• Monitors, troubleshoots, diagnoses, and remedies server and network related problems and failures.
• Installs and configures server and network related hardware/software which meet the company’s security standards.

Network & Systems Security Analyst

• supports Osaic’s, advisor facing cybersecurity operations.
• monitor security-related security events.
• triage potential incidents and respond to confirmed incidents, as necessary.
• participate in root cause analysis and assist advisors with implementing preventative measures.
• assist with incident investigations to determine root cause and extent of compromise.
• assist advisor, and/or their MSP/MSSP, with containment efforts to reduce the impact of security breaches.
• work advisor, and/or their MSP/MSSP, to recover impacted systems and verify their integrity after incidents.
• update incident response playbooks and processes.
• create comprehensive incident reports for internal review and audits.

See all jobs on JobTailor

Cyber Threat Hunter

Threat Intelligence Analyst

Cybersecurity Analyst

Competitive Intelligence Analyst

Cyber Threat Intelligence Analyst

Senior Cyber Security Analyst

Cybersecurity Analyst

Cybersecurity Analyst

Security Analyst

Senior Security Intelligence Analyst

Security Analyst

Cybersecurity Analyst

Cyber Threat Intelligence Analyst

Security Analyst II

Incident Response Analyst

Senior IT Security Analyst

Security Analyst II – Weekday Afternoons

Network & Systems Security Analyst

Security Analyst I