What’s the role?
Bloomberg’s Cyber Security Operations Center (CSOC) plays a critical role in safeguarding the company’s digital environment, actively monitoring systems and networks for any signs of suspicious activity. When a confirmed incident occurs, CSOC leads containment and response efforts, formalizing lessons learned and hardening defenses against future attacks.
The Process & Technology Optimization (PTO) team within CSOC is at the forefront of designing, building, and integrating process and technology solutions to enable CSOC functions to thrive and improve. As a PTO staff member, you will play a crucial role in understanding the evolving challenges faced by CSOC teams, driving moonshot goals, and implementing scalable, innovative solutions that shape the future of cyber security operations at Bloomberg.
We will trust you to:
Broaden CSOC’s Capabilities and Impact
• Own one or more areas of CSOC’s technology and process landscape (e.g., Network Security, EDR, Cloud, AI, Telemetry), managing and integrating the vendor products within them, representing CSOC to external stakeholders, and ensuring vision-consistent implementation and ongoing oversight
• Identify systemic cybersecurity operations issues, document potential methods to resolve, and align with management to prioritize resolution efforts across the enterprise
• Formalize and disseminate best practices, turning security operations from art into repeatable science
• Pilot and evaluate emerging technologies to evaluate practical adoption
• Mentor and provide guidance to PTO and broader CSOC staff earlier in their careers, helping them build skills and take on greater ownership over time
Identify Optimizations
• Engage deeply with CSOC functions (Event Analysis, Threat Hunting, Incident Response, Detection Engineering, Threat Intelligence, etc.) to understand and empathize with challenges that prevent teams from accomplishing their core missions
• Look for opportunities to transform CSOC operations, including improving analyst speed, capabilities and coverage through automation and introduction of new technology, controls, or processes that were previously out of reach
• Identify, collect, and surface measurable data and metrics from PTO-managed products, enabling data-driven process improvement across CSOC
Design & Implement Solutions
• Design and prioritize scalable, robust, and innovative process and technology solutions
• Validate, reframe, and adapt user-originated solutions to ensure alignment with broader vision and ideal execution and maintenance path (e.g. self-initiated, engineering-managed, or vendor-designed)
• When it makes sense for solutions to be built internally, design, execute, and maintain these products (through code or Low Code/No Code options like SOAR)
• Understand how the CSOC teams you support actually work, and design tooling and process to surface the right information at the moment they need it, falling back to granting direct product access only when that’s not a practical path
• Oversee the development and implementation of technical solutions, ensuring adherence to quality standards and project timelines
You’ll need to have:
Technical Expertise
• 5+ years of experience in engineering, systems design, or a cybersecurity operations center role (as an analyst, detection engineer, security engineer, or incident responder)
• Experience with data storage and retrieval systems (e.g. SIEM, databases, data lakes, etc.)
• Able to consider a complex process and identify optimization opportunities
• As security is a frequently evolving field, able to quickly understand new technologies and products
• Experience with, or exposure to, automation and Low Code/No Code platforms such as a SOAR
• Experience managing vendor relationships or driving delivery through external engineering or product teams
Ambitious Problem Solving & Critical Thinking Skills
• Proven ability to dissect complex technical and operational problems into their component parts
• Creative, strategic mindset with the drive to pursue ambitious improvements
Strong Collaboration & Communication Ability
• Inquisitive and curious listener
• Uses clear & concise written and verbal communication patterns
• Expert knowledge sharer who can acquire key context and provide it effectively to other team members
• Experience providing feedback, coaching, or mentorship to others
We’d love to see:
• 7+ years of experience working in or with a cybersecurity operations center (as an analyst, detection engineer, security engineer, or incident responder)
• 7+ years of experience as a security engineer (supporting or designing cybersecurity operations systems), specifically with products and capabilities like End Point Detection & Response (EDR), Threat Intelligence Platforms, Email Analysis, Malware Sandboxing, Network Intrusions Detection, Data Loss Prevention, etc.
• Python or scripting skills sufficient to design and build custom integrations, or extend automation platforms beyond their built-in capabilities, when the situation calls for it
• Experience protecting cloud infrastructure (IaaS, PaaS, or SaaS), operating security tooling that runs in the cloud, or applying GenAI capabilities to security use cases
If this sounds like you:
Apply if you think we're a good match. We'll get in touch to let you know what the next steps are, but in the meantime feel free to have a look at this: www.bloomberg.com/professional
Salary Range = 190,000 - 260,000 USD Annual + Benefits + Bonus
The referenced salary range is based on the Company's good faith belief at the time of posting. Actual compensation may vary based on factors such as geographic location, work experience, market conditions, education/training and skill level.
We offer one of the most comprehensive and generous benefits plans available and offer a range of total rewards that may include merit increases, incentive compensation (exempt roles only), paid holidays, paid time off, medical, dental, vision, short and long term disability benefits, 401(k) +match, life insurance, and various wellness programs, among others. The Company does not provide benefits directly to contingent workers/contractors and interns.