Senior Cyber Threat Analyst

Raymond James•Saint Petersburg, FL

1d•Hybrid

About The Position

The financial services industry is constantly under attack by sophisticated cyber adversaries that range from nation states to criminals. In response, the Raymond James Cyber Threat Center (CTC) is charged with ensuring all equities are secure against all tiers of adversaries. We are the central hub for Computer Network Operations and are on the front lines of security incident response, threat hunting, and intelligence. You'll be working with emerging technologies to solve challenging security problems in a fast-paced and continuously evolving environment, while helping steer the direction and evolution of the team. This highly visible team within the organization evaluates threats to the environment and dynamically adjusts to the ever-changing threat landscape by applying practical security knowledge to developing new detective measures to protect the firm.

Requirements

Knowledge of Networking and the common network protocols
Knowledge of Intrusion response and incident management lifecycle and processes
Knowledge of Windows, Linux, memory forensics
Knowledge of Log analysis (endpoint, network, email, cloud)
Knowledge of Vulnerabilities and manipulating exploit code for analysis
Knowledge of Systems administration in Linux, Unix, Windows or OSX operating systems
Knowledge of Common infrastructure systems that can be used as enforcement points
Knowledge of Current developments and trends in areas of expertise
Skill in Analysis: Identify and understand issues, problems and opportunities; compare data from different sources to draw conclusions
Skill in Communication: Clearly convey information and ideas through a variety of media to individuals or groups in a manner that engages the audience and helps them understand and retain the message
Skill in Exercising Judgment and Decision Making: Use effective approaches for choosing a course of action or developing appropriate solutions; recommend or take action that are consistent with available facts, constraints, and probable consequences
Skill in Building Effective Relationships: Develop and use collaborative relationships to facilitate the accomplishment of work goals
Skill in Client Focus: Make internal and external clients, and their needs, a primary focus of actions; develop and sustain productive client relationships
Ability to Perform static and dynamic malware analysis
Ability to Analyze large data sets and identify anomalies
Ability to Quickly create and deploy countermeasures under pressure
Ability to Create complex scripts, develop tools, or automate processes in PowerShell, Python or Bash
B.S. in Computer Science, Computer Engineering, MIS, or related degree
A minimum of 5 years in Information Technology, including with at least 3 years of related experience in Information Security, 2 years in conducting Cyber Network Defense, and 3 years of experience with incident response methodologies, malware analysis, penetration testing, scripting and/or forensics
An equivalent combination of education, training and experience

Nice To Haves

One or more of the following certifications or the ability to obtain within 1 year: CISSP: Certified Information Systems Security Professional, SANS: GCIH – Incident Handler, SANS: GCIA – Intrusion Analyst, SANS: GCFE – Forensic Examiner, SANS: GNFA – Network Forensic Analyst, SANS: GREM – Reverse Engineering Malware, OSCP – Offensive Security Certified Professional, OSCE – Offensive Security Certified Expert

Responsibilities

Serve as a primary member of the Cyber Threat Center (CTC) who handles security events and incidents on a daily basis in a fast-paced environment
Act as an Incident Handler who can handle minor and major security incidents within the defined Computer Security Incident Response process
As part of the Cyber Network Defense be able to quickly analyze threats, understand risk, deploy effective countermeasures, make business critical incident response decisions, and work as part of a team of individuals dedicated to protecting the firm
Maintain situational awareness for cyber threats across the global firm and take action where necessary
Maintain knowledge of security principles and best practices. Must remain current with emerging threats and trends
Assist teams in various security and privacy risk mitigation efforts; including incident response
Lead or participate in information security related projects or in managing strategy
Conduct forensic investigations for HR, Legal, or incident response related activities
Develop new forensic detective and investigative capabilities using current technical solutions
Work with various business units and technical disciplines in a security consultant role for cyber threats
Act as an escalation point for managed security services and associates of Raymond James
Conduct daily responsibilities including, but not limited to: Countermeasure deployment across various technologies; Malware and exploit analysis; Intrusion monitoring and response; Assessing alerts and notifications of event activity from intrusion detection systems and responding accordingly to the threat; Continuing content development of threat detection and prevention systems; Data analysis and threat research
Limited weekend after-hours / on-call cyber threat support rotation may be required