Senior Cyber Threat Analyst
At a glance
Senior Security Operations & Analysis role at Ascensushr. Remote, United States · full-time · no salary stated · we estimate $132,703–$185,000 across the United States.
Ascensushr has not published a salary for this role. The figure below is our estimate, not theirs.
remoteroles summary, based on the employer's posting.
What you'll do
- Watch SIEM, endpoint, network, cloud and other security systems for activity that may signal a threat
- Build and keep current Tier 1 and Tier 2 SOC procedures and playbooks for round-the-clock operations
- Run threat detection and response tools for malware, email, applications, networks, domains, indicators and forensic analysis
- Track threat intelligence measures and reporting, then follow forensic procedures and incident plans as directed
- Support penetration tests and the annual assessment of managed services
What you bring
- At least five years of information security experience
- Intermediate command of threat hunting, incident response, malware analysis, threat intelligence and the listed security domains
- Working knowledge of frameworks such as NIST CSF, PCI-DSS, CIS CSCs or another listed standard
- Strong written and spoken communication, including clear exchanges with auditors and business partners
Who this fits
This senior role suits an analyst who can mentor junior colleagues and work with Security Engineering, IT architecture, Risk and Legal. It is remote in the United States; you need a private, uninterrupted workspace during business hours and internet service of at least 25 Mbps.
From the employer
Ascensus is the leading independent technology and service platform powering savings plans across America, providing products and expertise that help nearly 16 million people save for a better today and tomorrow.
Section 1: Position Summary
The Cyber Threat Detection and Response team is responsible for shaping and maintaining a Cyber Threat Intelligence program that aligns with leading industry standards, advice, and direction. This involves operating and continually improving existing Cyber Threat Intelligence processes, as well as the development of new processes in response to evolving threats and business requirements. This role will work in close partnership with Security Engineering team, IT Architect(s), Risk and Legal. This position will report directly to the Ascensus Chief Information Security Officer.
Section 2: Job Functions, Essential Duties and Responsibilities
- Monitoring of all cybersecurity solutions including but not limited SIEM, EDR, Vulnerability Management, Network, FW / IPS, DLP, cloud for suspicious activities.
- Develop and maintain 24/7 SOC Tier 1 and Tier 2 cybersecurity SOP and playbooks.
- Manage and Monitor threat detection and response tools including but not limited to malware analysis, email analysis, application analysis (SAST/DAST monitoring), network analysis, domain intelligence, threat IOC and feeds, forensic analysis, and sandbox tools.
- Manage and maintain key threat intelligence KPIs and reporting capabilities.
- Follow digital forensic program and process as directed.
- Execute IT incident response plan as directed.
- Assist in the performance of penetration testing and yearly managed service assessment.
Supervision
- N/A
Section 3: Experience, Skills, Knowledge Requirements
- Minimum 5 years of experience in Information Security.
- Great understanding of the cyber threat landscape.
- Demonstrable intermediate knowledge of all the following areas: cybersecurity concepts, network protocols, firewalls, IDS/IPS systems, email security, endpoint security, network security, Windows/Linux/macOS systems, cyber threat hunting, malware analysis tools and techniques, cyber threat intelligence, common threat actor TTPs, application security concepts, cloud security fundamentals, Incident Response methodologies.
- Mentor junior cyber threat analysts
- Be highly inquisitive and never stop asking questions or looking for results.
- Knowledge of relevant frameworks, standards, and best practices such as NIST CSF, PCI-DSS, CIS CSCs, MITRE ATT&CK, Cyber Kill Chain etc.
- Excellent written and oral communication skills.
- The ability to communicate effectively (clear, concise, and professionally) with all levels within Ascensus, auditors and business partners.
For virtual remote positions, we require an uninterrupted workspace during business hours and an internet work speed of 25 Mbps or better. If you are unsure of your internet speed before applying, please check with your service provider.
We are proud to be an Equal Opportunity Employer
Be aware of employment fraud. All email communications from Ascensus or its hiring managers originate from @ascensus.com or @futureplan.com email addresses. We will never ask you for payment or require you to purchase any equipment. If you are suspicious or unsure about validity of a job posting, we strongly encourage you to apply directly through our website.
Security Operations & Analysis work from LinkedIn, X, Reddit and Upwork, in one list.
Each morning you get everything that fits, strongest first.
Security Operations & AnalysisRemote
Find me workBy the team behind remoteroles.