Lead Cyber Defense Center Analyst

State Street•Quincy, MA

3d•$90,000 - $157,500•Onsite

About The Position

State Street seeks to recruit a Lead Cyber Security Operations Center (SOC) Analyst that will lead the triage, analysis and response to cyber-attacks. Join us in evolving our response capabilities to protect State Street, its customers and partners from the ever evolving and sophisticated global threat actors. State Streets Fusion Center is responsible for detecting and responding to various cyber threats 24/7 365 days a year, that are directed towards the enterprise. The successful candidate will also partake in an on-call rotation.

Requirements

Experience with investigating & managing major/complex cyber incidents end to end
Experience working/leading in a SOC or Fusion Center
Strong operating systems administration skills (Windows, Linux, Mac)
Strong malware analysis expertise
Experience in performing memory forensics
Knowledge of adversarial tactics, techniques, procedures (TTPs) & Industry standard frameworks (NIST, Mitre Att&ck)
Knowledge of IT architecture and operations (computing, network, storage & cloud)
Strong working knowledge of security technologies including but not limited to SIEM, EDR/EPP, AV, ID/PS, HIPS, Web Proxy/Content filtering, AD, PKI and DNS
Degree in Cyber Security, Information Technology, Computer Science or relevant experience
4+ years in a cyber security SOC/IR type skill role – Incident Response, SOC Tier 3/Lead Analyst, Threat Hunter, Penetration testing, etc.

Nice To Haves

CISSP, CEH, OSCP,OSCE or GCIH or applicable certification in Security field
Financial Services experience a plus.
Software development and/or scripting experience a plus: Python, Powershell, SQL etc.

Responsibilities

Leading the cyber incident response process to ensure timely triage, analysis, containment, eradication and return to service for high severity or long running incidents.
Author incident status updates and closure reports to leadership.
Produce post mortem reports to identify lessons learned and recommendations.
Continuously prepare for incidents by updating and maintaining incident response plans, playbooks and procedures.
Manage and participate in cyber related exercises such as table tops and cyber ranges.
Measure the effectiveness and performance of the incident response process through KRI and KPI metrics.
Identify methods to continuously enhance the incident response process
Work closely with the SOC to drive development and collaboration
Train and Mentor SOC personnel
Creating an environment which drives knowledge sharing with teams across the Fusion Center
Help developing the 24/7 Fusion Center mindset and follow the sun model

Benefits

retirement savings plan (401K) with company match
insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
paid-time off including vacation, sick leave, short term disability, and family care responsibilities
access to our Employee Assistance Program
incentive compensation including eligibility for annual performance-based awards
eligibility for certain tax advantaged savings plans
inclusive development opportunities
flexible work-life support
paid volunteer days
vibrant employee networks