Leverage security tools and technologies (e.g., SIEM, Endpoint Detection and Response (EDR), and network packet capture/inspection platforms) to support detection, investigation, and response.
Collaborate with cross-functional teams to deliver improvements to security operations—tools, processes, and procedures—driving efficiency and resiliency.
Use enterprise-authorized AI capabilities to accelerate triage, evidence synthesis, and incident reporting, validating outputs and handling data in accordance with sensitivity and security requirements.
Required qualifications, capabilities, and skills
Formal training or certification with 5+ years of information security experience with a focus on SOC operations and incident response; financial services.
Strong investigative mindset with a structured approach to analyzing alerts/indicators and documenting findings clearly for both technical and executive audiences.
Hands-on experience with security tools/techniques including SIEM, EDR, IDS, log analysis, email analysis, vulnerability analysis, PCAP analysis, and malware analysis.
Strong understanding of operating systems, cloud technologies, and networking fundamentals (OSI model; Windows/Linux; TCP/IP, HTTP(S), DNS, DHCP, SMTP, FTP). Experience with scripting/automation to improve security workflows.
Clear, effective communicator (written and verbal), able to engage stakeholders, senior leadership, and cross-functional teams.
Experience working in a matrixed organization requiring cross-functional collaboration to deliver outcomes.
Knowledge of cyber threats and adversary tactics, techniques, and procedures (TTPs), including MITRE ATT&CK, and associated mitigation strategies. Familiarity with malware analysis techniques (static/dynamic) to extract indicators and support detection improvements.
Proactively identifies improvement opportunities and takes initiative to streamline processes and procedures, implement tools to automate manual processes.
Shares knowledge and best practices; mentors and coaches team members to build capability across the group.
Preferred qualifications, capabilities, and skills
Degree in Computer Science, Information Security, or a related field. Industry-recognized security certifications (e.g., GIAC: GSEC/GCIH/GCFA; ISC2: CISSP/CCSP).
Demonstrated experience using enterprise-authorized AI capabilities to support security operations workflows, with strong validation habits and awareness of data sensitivity.
Industry-recognized security certifications (e.g., GIAC: GSEC/GCIH/GCFA; ISC2: CISSP/CCSP).
Comfortable working in a matrixed environment: Demonstrates collaboration skills and the ability to coordinate with partners to deliver outcomes. Good communicator (written and verbal)
Demonstrated experience using enterprise-authorized AI capabilities to support security operations workflows, with strong validation habits and awareness of data sensitivity.
Some experience using enterprise-authorized AI capabilities to support security operations workflows, with strong validation habits and awareness of data sensitivity.
#ctc
