Analyst, Security Operations - Delaware

BlackRock•Wilmington, DE

6h•Hybrid

About The Position

The Cyber Operations team monitors and investigates security alerts to identify potential incidents and protect the organization’s technology environment. It collaborates across alert monitoring, triage, escalation, and incident support while continuously strengthening its cybersecurity capabilities. As a Cyber Monitoring Analyst, you will analyze security alerts, investigate potentially harmful activity, and support the escalation and remediation of security events. Your work will contribute to timely incident response, accurate reporting, and the continuous improvement of Cyber Monitoring policies and operating procedures.

Requirements

Demonstrated ability to support Information Technology (IT), information security, technical support, or security operations activities.
Knowledge of cloud technologies such as Microsoft Azure, Amazon Web Services (AWS), or Google Cloud Platform (GCP), including Infrastructure as a Service (IaaS) security concepts and technologies.
Experience monitoring, investigating, documenting, and reporting security events, including high-severity threats in on-premises or cloud environments.
Knowledge of endpoint and network security concepts, security tools, and incident-management platforms such as ServiceNow.
Strong written and verbal communication skills, including the ability to explain technical information to individuals without an information technology background.
Ability to apply sound technical, interpersonal, and organizational judgment when evaluating and resolving complex problems.

Responsibilities

Apply sound judgment and critical thinking to solve complex problems, adapt as the business evolves, and explore new approaches and technologies while rigorously challenging results.
Perform real-time analysis and correlation of security logs and alerts to identify potentially harmful activity.
Follow established operational procedures to investigate, prioritize, escalate, and support the remediation of security events.
Use multiple security technologies and relevant data sources to investigate alerts and assess potential incidents.
Produce timely and detailed incident documentation, including investigative findings, reviews, decisions, and follow-up activities.
Contribute to the creation, maintenance, and continuous improvement of Cyber Monitoring policies, procedures, and operational documentation.
Maintain awareness of cybersecurity trends, emerging threats, and evolving attack techniques relevant to the organization’s environment.