Cyber Defense Senior Analyst

LPL Financial • Tempe, AZ

153d • $90,188 - $150,313

About The Position

We are currently looking to hire a Cyber Defense Senior Analyst within the Security Operations Center (SOC), which is a part of LPL's Technology Information Security organization. The Cyber Defense Analyst is a high visibility position, which is responsible for activities relating to monitoring and responding to security events. The SOC analyst receives, researches, triages and documents all security events and alerts as they are received. This individual supports multiple security-related platforms and technologies, interfacing with others within the IT organization, as well as other internal business units and external customers/partners. Events will be generated from endpoints, networks, security information and event management (SIEM) systems, threat intelligence platforms, employees, third-parties and other sources. The SOC analyst reports to the Cyber Defense Manager and is an involved member of the SOC team. This role must display an understanding of new trends and technologies related to IT security and compliance, and contribute to the company IT security strategy and roadmap.

Requirements

• 5 years' experience as a SOC analyst is required.
• Experience working with SIEM systems, threat intelligence platforms, security automation and orchestration solutions, intrusion detection and prevention systems (IDS/IPS), file integrity monitoring (FIM), DLP and other network and system monitoring tools.
• Advanced experience and/or training in Splunk Enterprise Security and SOAR.

Nice To Haves

• College degree in associated field.
• Advanced expertise with Cloud services like Azure and AWS is a plus.
• Experience with scripting languages, such as Python, etc.
• Knowledge of a variety of Internet protocols.
• Professional certification (exp: GCIH, CySA+).

Responsibilities

• Triage, investigate and respond to events produced by our SIEM solution by utilizing a wide array of tools to mitigate active threats.
• Enforce information security policy, standards and guidelines for business operations and technology requirements.
• Identify IT security risks from technical and functional perspectives.
• Notify management of suspected incidents and articulate the event's history, status and potential impact.
• Assist with Incident Responders when an escalation is required by providing a detailed recount of events.
• Configure and work with SIEM and SOAR tools, MDR/XDR.
• Work effectively in a fast-paced team environment by communicating in a detailed, concise manner.
• Maintain working knowledge of threat detection as the industry evolves.
• Perform other duties as assigned.
• Act as a mentor for Analyst I's and II's.
• Responsible for supporting Security Operations during normal business hours and in an on-call rotation outside normal business hours.

Benefits

• 401K matching
• health benefits
• employee stock options
• paid time off
• volunteer time off

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Securities, Commodity Contracts, and Other Financial Investments and Related Activities
• Education Level: Bachelor's degree