Security Analyst

• Proactively hunt for indicators of compromise (IOCs) and advanced persistent threats (APTs) across the network, endpoints, and cloud environments using threat intelligence and a hypothesis-driven methodology.
• Conduct in-depth analysis of security events, network traffic, and endpoint data to identify malicious activity and potential breaches.
• Utilize the SIEM and EDR platform extensively, applying expert knowledge of the scripting, SIEM and EDR query language to perform complex searches and data analysis.
• Lead and participate in incident response activities, including containment, eradication, and recovery efforts, serving as a primary escalation point for critical security incidents.
• Develop and refine threat hunting playbooks, procedures, and detection rules to improve the security team’s efficiency and effectiveness.
• Collaborate with the security engineering and security operations center (SOC) teams to integrate new threat intelligence and enhance existing security tools and controls.
• Mentor junior analysts and contribute to the ongoing improvement of the organization's overall security posture.

Senior Cybersecurity Analyst – Threat Hunter

• Monitor and analyze daily threat intelligence feeds and alerts using threat intelligence tools, identifying potential threats and escalating as necessary.
• Conduct regular threat hunting activities using threat intelligence tools, focusing on indicators of compromise (IOCs) and suspicious behaviors.
• Assist in vulnerability management processes, including reviewing scan results and supporting remediation efforts.
• Support the development and updating of threat intelligence playbooks, ensuring alignment with the NIST Cybersecurity Framework.
• Assist in analyzing security incidents related to threat management, email security, endpoint security, network security, and physical security devices, providing reports and improvement suggestions.
• Prepare and distribute weekly threat intelligence reports, summarizing trends, potential risks, and mitigation recommendations.
• Participate in threat simulation, incident response, and red team exercises to test and improve the bank's detection and response capabilities.
• Assist in quarterly vulnerability assessments, providing actionable recommendations for risk mitigation.
• Assist in firewall management and reviews to ensure proper configurations and functionality.
• Support email security monitoring activities, investigating potential phishing or malware incidents using email security platforms.
• Collaborate with the physical security team to ensure the security and proper maintenance of physical security devices.
• Contribute to the monthly review and update of physical security device configurations, ensuring compliance with security policies and guidelines.

See all jobs on JobTailor

Senior Cybersecurity Analyst – Threat Hunter

Information Security Analyst I