Cyber Operations, Analyst

BlackRock

23h • $90,250 - $110,000 • Hybrid

About The Position

At BlackRock, we are all connected by one mission: to help more and more people experience financial well-being. Our clients, and the people they serve, are saving for retirement, paying for their children’s educations, buying homes and starting businesses. Their investments also help to strengthen the global economy: support businesses small and large; finance infrastructure projects that connect and power cities; and facilitate innovations that drive progress. This mission would not be possible without our smartest investment – the one we make in our employees. It’s why we’re dedicated to creating an environment where our colleagues feel welcomed, valued and supported with networks, benefits and development opportunities to help them thrive. Your team Join our global team of cyber security experts, protecting our business and developing exciting capabilities on the frontline of cyber defense. Your Role and Impact As a Cyber Operations Analyst, you need to demonstrate thoughtful knowledge of the evolving cyber threat landscape, BlackRock’s risks, controls and security thresholds and recognize the expertise and importance of differentiated roles within the SOC. You will use your experience with scripting and knowledge of forensic techniques to rapidly assimilate complex data and information. As a self-starter with the personal drive to achieve superior performance, you will support the global Cyber Operations function. BlackRock is committed to building great Cyber Security careers for our people, and we are looking for an individual with a passion for cyber security defense to continue the growth of our exceptional team.

Requirements

• 4 or more years of experience in security operations center, or similar security technical and operational role is preferred.
• Bachelor’s degree or higher.
• Intermediate knowledge in system security architecture and security solutions – IDS, Splunk, data loss prevention, next generation anti-malware, etc.
• Experience in networking fundamentals (TCP/IP, Network Layers, etc.), malware operation and indicators, current threat landscape (threat actors, APT, cyber-crime, etc.), security-related technologies and their functions (IDS, IPS, FW, WAF, SIEM, DLP, Proxy, next gen anti-malware etc.).
• A history of working with Windows, Unix or Linux; knowledge of Firewall and Proxy technology; malware operation and indicators, penetration techniques
• Tackled advanced event analysis leveraging SIEM tools.
• Skills in incident investigation and response and advanced log parsing and analysis skill set.

Nice To Haves

• MBA, CISSP, CISM, GCHI, CEH, CCNA, or GIAC are preferred.
• Advanced knowledge of ServiceNow a plus.

Responsibilities

• Acts as an escalation point for regional information security incidents and support the response to incidents impacting the region and/or occurring during regional business hours.
• Performs daily review of reports and alerts to identify Information Security events for further investigation while escalating exceptional events as necessary.
• Act as a mentor for more junior team members.
• Performs investigation and escalation for complex or high severity security threats or incidents.
• Ensures that all identified events are promptly validated and thoroughly investigated.
• Collaborates with technical teams to identify, resolve, and mitigate events.
• Provides advice and guidance on the response action plans for information risk events and incidents based on incident type and severity.
• Assists with containment of threats and remediation of environment during or after an incident.
• Regularly develop new and interesting use cases for future SIEM logic.
• Participate in cyber threat hunts in support of the global cyber operations function.
• Assist with forensics investigations.
• Participate in the creation, modification and maintenance of all Cyber Monitoring policies and procedures.
• Keep abreast of cyber security trends and the emerging threat landscape in general and as it relates to BlackRock.
• Deliver timely and detailed documentation related to any incident including the findings, review and follow-up activities.

Benefits

• employees are eligible for an annual discretionary bonus, and benefits including healthcare, leave benefits, and retirement benefits.
• strong retirement plan, tuition reimbursement, comprehensive healthcare, support for working parents and Flexible Time Off (FTO) so you can relax, recharge and be there for the people you care about.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level