Lead SOC Analyst
About The Position
The Cyber Fusion Centre (CFC) is looking for a Lead SOC (Security Operations Center) Analyst to join us. This team is responsible for the prevention of Cyber Security incidents by monitoring, detection, and response to potential intrusions in real time within the Swift network. As a Lead SOC Analyst, you will provide input to security strategy and control of systems, networks, physical infrastructure, people and information. You will participate in the design, communication and execution of policies/controls/procedures as appropriate for Swift and its customers, and as consistent with the company objectives, company reputation and regulatory requirements. In this role, you will act as an operational mentor, coaching junior members within the team. Swift is unable to sponsor an employment authorization for this position now or in the future.
Requirements
- Bachelor's degree in Computer Science, IT, or related field
- 8+ years of related working experience in a SOC, Incident Response, or Threat Hunting role
- Experience performing or leading threat hunting activities
- Experience with cloud technologies such as Azure, Google Cloud, or AWS
- Experience with security tools such as SIEM, IDS/IPS, EDR/XDR, SOAR, etc.
- Ability to learn in a fast-paced, multi-dimensional, technical environment
- Strong verbal and written communication and the ability to concisely and accurately document technical investigations
Nice To Haves
- Familiarity with Scripting languages such as PHP, Perl or Python and databases such as MySQL, and knowledge of Unix and Windows.
- Security certifications such as GIAC GCIA/GCIH, CISSP, or other relevant certifications
- Knowledge of penetration testing and vulnerability assessment capabilities and tools
Responsibilities
- Lead the creation and operationalization of a formalized Threat Hunting program within the SOC
- Participate in a 24x7 SOC; occasional shift work is required for this position. Shift work typically includes one week per month Monday - Sunday, 11 AM - 7 PM and occasional holiday work; all other hours are standard working hours.
- Provide expertise & guidance to less senior team members
- Support Incident Response (IR) and Threat Detection development activities and report to Senior Management ensuring proper awareness and ownership
- Support the introduction and implementation of new capabilities and IR processes and procedures within the Cyber Fusion Centre
- Interact closely with Swift's Red Team to further enhance detection capabilities
- Lead and participate in IR simulation exercises from a blue team perspective
- Perform proper triage identification and scoping of incidents including identification, investigation, and follow-up of containment actions
- Participate in the identification, development and communication of IOCs
- Participate in the identification and coordination of eradication and remediation actions with various stakeholders and ensure timely follow-up.
- Enhance and tune tools for efficiently managing large collections of security events
- Stay abreast of changing technologies, emerging cyber threats and attack methodologies
Benefits
- medical, dental, vision and life insurance with no premium costs for our employees and their families
- retirement plan plus matching 401k
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
