Principal Information Security Analyst

Gen•New York, NY

About The Position

Principal Information Security Analyst Are you a senior SOC professional with strong detection engineering experience? We are looking for a security specialist who sees the SOC not just as alert handling, but also as an engineering function in close cooperation with our Security Engineering team. This position focuses on building and continuously improving detection capabilities across multiple security platforms. You will go beyond alert monitoring by driving automation initiatives, taking ownership of detection quality, and shaping how our global SOC identifies and responds to threats. As a global team, we operate in a follow-the-sun model, providing 24/7 coverage through regional teams working during their business hours and sharing on-call responsibilities on weekends. Gen is a global company dedicated to powering Digital Freedom through its trusted consumer brands including Norton, Avast, LifeLock, MoneyLion and more. Our combined heritage is rooted in financial empowerment and cyber safety for the first digital generations, and today we deliver award-winning cybersecurity, online privacy, identity protection and financial wellness solutions to nearly 500 million users in more than 150 countries. Together, we share a collective passion and vision to protect consumers and help them grow, manage and secure their digital and financial lives. We’re always looking for smart, fearless and high-impact talent who see AI as a teammate – leveraging it to move faster and deliver meaningful results. When you’re part of Gen, you’ll have the flexibility, tools and support to do your best work and grow your career – from flexible working options and time off to competitive pay, benefits and well-being programs. At Gen, we are scrappy and relentlessly customer driven. We create room for healthy debate, experimentation and continuous learning, and we seek out people with different experiences, identities and ideas to join our team. You’ll work with people who back each other, respect each other and understand that our differences are a competitive advantage. If this sounds like you, we’d love you to be part of Gen. Gen is an equal opportunity employer, and we’re committed to fair, inclusive practices at every stage of the candidate and employee journey. Employment decisions are based on merit, experience and business needs.

Requirements

5+ years of hands-on experience in security operations with strong focus on detection engineering in a complex enterprise environment
Proven experience independently designing and tuning detection use cases across multiple security platforms, including SIEM (Splunk preferred)
Strong practical experience with multi-source log analysis across SIEM, WAF, EDR, DLP, email, cloud, network, and threat intelligence
Understanding of cloud security concepts and experience monitoring cloud environments in major providers (AWS, Azure, GCP)
Practical understanding of MITRE ATT&CK and the ability to align detections to attacker tactics and techniques
Experience leading detection, monitoring, or automation improvement initiatives involving multiple security and technology teams

Nice To Haves

Experience operating in regulated environments (e.g., fintech or financial services) is preferred

Responsibilities

Independently design and implement detection use cases across multiple security platforms (SIEM, WAF, EDR, DLP, email, cloud, network, and threat intelligence tools)
Lead cross-team detection improvement initiatives to optimize detection logic, reduce false positives, and enhance alert fidelity
Map detections to MITRE ATT&CK tactics and techniques and identify coverage gaps
Drive automation, enrichment, and AI-assisted workflows to reduce manual effort and support faster, more informed security decision-making
Perform deep multi-source correlation and root cause analysis across enterprise-scale telemetry
Support complex incident investigations and provide technical expertise during escalations
Mentor junior analysts in advanced analysis, detection engineering, and investigative techniques
Contribute to the continuous improvement of SOC monitoring maturity, visibility, and operational efficiency