Job description

Role Overview The Senior IT Security Analyst is responsible for overseeing the detection, investigation, and mitigation of advanced cybersecurity threats. This role involves high-level incident response, threat hunting, and the continuous improvement of security monitoring tools and processes to protect the organization's digital assets. Key Responsibilities • Incident Response: Lead the investigation of complex security incidents; perform deep-dive forensics and coordinate remediation efforts to minimize impact. • Threat Hunting : Proactively search for undetected malicious activity within the network using advanced analytical techniques and threat intelligence. • Monitoring & Detection : Manage and fine-tune Security Information and Event Management (SIEM) tools, Intrusion Detection/Prevention Systems (IDS/IPS), and Endpoint Detection and Response (EDR) solutions. • Threat Intelligence: Integrate and utilize threat intelligence feeds to stay ahead of emerging attack vectors and proactively update defensive postures. • Mentorship : Provide technical guidance and mentorship to SOC analysts to enhance the overall capability of the team. • Process Improvement : Develop, document, and refine Standard Operating Procedures (SOPs), incident response playbooks and SOC runbook. • Vulnerability Management: Assist in identifying security gaps and coordinating with infrastructure teams to facilitate timely patching and mitigation. Required Qualifications • Experience : Extensive experience in a SOC environment (typically 5+ years) with a focus on incident handling and digital forensics. • Technical Skills: o Proficiency with SIEM platforms (e.g., Splunk). o Strong understanding of network protocols (TCP/IP, DNS, HTTP, etc.) and traffic analysis. o Familiarity with malware analysis and reverse engineering techniques. • Analytical Skills : Exceptional problem-solving abilities and a high attention to detail. • Communication : Ability to communicate technical findings clearly to both technical teams and non-technical stakeholders. #PFFCUBO

Requirements

Must-haves

• Incident Response: Lead the investigation of complex security incidents; perform deep-dive forensics and coordinate remediation efforts to minimize impact.
• Threat Hunting : Proactively search for undetected malicious activity within the network using advanced analytical techniques and threat intelligence.
• Monitoring & Detection : Manage and fine-tune Security Information and Event Management (SIEM) tools, Intrusion Detection/Prevention Systems (IDS/IPS), and Endpoint Detection and Response (EDR) solutions.
• Threat Intelligence: Integrate and utilize threat intelligence feeds to stay ahead of emerging attack vectors and proactively update defensive postures.
• Mentorship : Provide technical guidance and mentorship to SOC analysts to enhance the overall capability of the team.
• Process Improvement : Develop, document, and refine Standard Operating Procedures (SOPs), incident response playbooks and SOC runbook.
• Vulnerability Management: Assist in identifying security gaps and coordinating with infrastructure teams to facilitate timely patching and mitigation.
• Experience : Extensive experience in a SOC environment (typically 5+ years) with a focus on incident handling and digital forensics.
o Proficiency with SIEM platforms (e.g., Splunk).
o Strong understanding of network protocols (TCP/IP, DNS, HTTP, etc.) and traffic analysis.
o Familiarity with malware analysis and reverse engineering techniques.
• Analytical Skills : Exceptional problem-solving abilities and a high attention to detail.
• Communication : Ability to communicate technical findings clearly to both technical teams and non-technical stakeholders.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: adp-workforce-now
Effort: medium