Cyber Defense Senior Analyst

LPL Financial•Charlotte, NC

2d•Hybrid

About The Position

What if you could build a career where ambition meets innovation? At LPL Financial, we empower professionals to shape their success while helping clients pursue their financial goals with confidence. What if you could have access to cutting-edge resources, a collaborative environment, and the freedom to make an impact? If you're ready to take the next step, discover what’s possible with LPL Financial. Job Overview: We are currently looking to hire a Cyber Defense Senior Analyst within the Security Operations Center (SOC), which is a part of LPL’s Technology Information Security organization. The Cyber Defense Analyst is a high visibility position, which is responsible for activities relating to monitoring and responding to security events. The SOC analyst receives, researches, triages and documents all security events and alerts as they are received. This individual supports multiple security-related platforms and technologies, interfacing with others within the IT organization, as well as other internal business units and external customers/partners. Events will be generated from endpoints, networks, security information and event management (SIEM) systems, threat intelligence platforms, employees, third-parties and other sources. The SOC analyst reports to the Cyber Defense Manager and is an involved member of the SOC team. This role must display an understanding of new trends and technologies related to IT security and compliance, and contribute to the company IT security strategy and roadmap.

Requirements

5 years’ experience as a SOC analyst is required.
Experience working with SIEM systems, threat intelligence platforms, security automation and orchestration solutions, intrusion detection and prevention systems (IDS/IPS), file integrity monitoring (FIM), DLP and other network and system monitoring tools.
Advanced experience and/or training in Splunk Enterprise Security and SOAR.
Track record of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating effectively.

Nice To Haves

College degree in associated field
Advanced expertise with Cloud services like Azure and AWS is a plus.
Experience with scripting languages, such as Python, etc.
Knowledge of a variety of Internet protocols.
Professional certification (exp: GCIH, CySA+)
SME on 8 Security Controls

Responsibilities

Triage, investigate and respond to events produced by our SIEM solution by utilizing a wide array of tools to mitigate active threats.
Enforce information security policy, standards and guidelines for business operations and technology requirements.
Identify IT security risks from technical and functional perspectives.
Notify management of suspected incidents and articulate the event’s history, status and potential impact.
Assist with Incident Responders when an escalation is required by providing a detailed recount of events.
Configure and work with SIEM and SOAR tools, MDR/XDR.
Work effectively in a fast-paced team environment by communicating in a detailed, concise manner.
Maintain working knowledge of threat detection as the industry evolves.
Perform other duties as assigned.
Act as a mentor for Analyst I’s and II’s
Responsible for supporting Security Operations during normal business hours and in an on-call rotation outside normal business hours