Senior Information Security Analyst (SecOps)

DLA Piper•Washington, DC

23h•$94,490 - $131,164•Hybrid

About The Position

The Senior Information Security Analyst identifies, investigates, and addresses internal and external threats. The role applies deep knowledge of threats, attacks, and malware to develop enterprise detection and protection measures, and works with IT to maintain security controls by tuning detection systems, updating control policies, and automating processes. The position manages relationships with security operations vendors and provides technical leadership and mentorship to security analysts. It drives advanced threat detection, incident response, and vulnerability management initiatives to maintain a proactive security posture. The role is based in a Washington DC, Atlanta, Austin, Baltimore, Chicago, or Northern Virginia office and offers a hybrid work arrangement, coordinated with the hiring manager or supervisor.

Requirements

Bachelor's degree in Information Security, Cybersecurity, or a similar field.
At least 7 years of experience working in the cybersecurity field.
Proficient verbal and written communication, including conveying technical information to non-technical audiences.
Strong analytical skills and attention to detail.
Skill in identifying, triaging, and analyzing security events using SIEM systems.
Deep understanding of incident response processes and methodologies.
Familiarity with scripting languages for automating security operations and enhancing incident response.
Demonstrated understanding of attacker methodologies.
Solid grasp of intrusion detection systems, AI-based attack detection and prevention strategies, and SOC operations.
Knowledge of cloud infrastructure and security considerations in cloud environments.
Familiarity with core infrastructure components such as DNS, Active Directory, and Exchange.
Ability to meet the essential job expectations, including effective communication, timely and accurate work, meeting deadlines, fostering positive work relationships, complying with firm policies, and managing competing demands in a fast-paced environment.

Nice To Haves

Master's degree in Information Security, Cybersecurity, or a similar field.
Professional-level industry certification, such as CISSP, GIAC, or SANS.
Prior experience with Microsoft Defender, CrowdStrike, and Palo Alto Networks.
Experience in professional services sectors such as legal, finance, or consulting.

Responsibilities

Mentor and guide Information Security Analysts.
Evaluate the effectiveness of and improve information security program functions.
Review SIEM systems and regularly report metrics and summaries on ongoing investigations and ticket tracking.
Triage alerts by investigating and analyzing security incidents, identifying root causes, and developing mitigation strategies.
Ensure effective endpoint threat detection, including EDR capabilities, traditional antivirus, asset management, and familiarity with baseline and configuration management tools.
Manage next-generation firewalls and/or intrusion detection/prevention systems (IDS/IPS).
Engage in threat hunting and utilize threat intelligence.
Use malware sandbox technologies and interpret results.
Oversee incident response tools, processes, and capabilities.
Apply experience or deep understanding of vulnerability and configuration management.
Conduct independent project work.
Lead and manage a team of business professionals, including coaching, mentoring, professional development, and regular performance feedback.
Collaborate with IT to maintain security controls, tune detection systems, update control policies, and automate processes.
Manage relationships with security operations vendors.