Sr Info Security Threat Hunting

TIAA•Charlotte, NC

4d•Onsite

About The Position

The Information Security Threat Hunting Specialist determines and reports threats or hidden events within the enterprise network. Under limited supervision, this job uses defensive measures and information collected from a variety of sources to protect the company's data, information systems and networks. This job also works to improve the existing protection systems by continually monitoring both the internal control environment and the external threat environment. This specialist will identify potential data leaks and determine if an incident constitutes a violation of policies and standards.

Requirements

3+ Years Required
SOAR type application creation and automation
Advanced SIEM query creation skills
securing AI and AI monitoring
Accountability
Adaptability
Business Continuity Planning
Cloud Computing Security
Collaboration
Communication
Compliance
Consultative Communication
Cybersecurity
Detail-Oriented
General Risk Management
Network Security
Prioritizes Effectively

Nice To Haves

5+ Years Preferred
University (Degree) Preferred

Responsibilities

Determines potential threats, anomalous or malicious activities to network resources by examining and analyzing network traffic.
Reviews and conducts cost/benefit evaluation of cloud solutions compared to virtual private networks, dedicated hosting, and in-house solutions.
Determines the technical feasibility of adopting external cloud based IT platform and infrastructure services within the organization.
Leads the identification of portions of the organization's IT platform/infrastructure with the highest potential return for cloud deployment.
Implements the organization's global strategies and initiatives to enhance Information Technology plans, operations and procedures.
Verifies Intrusion Detection System (IDS) alerts as they occur.
Researches and analyzes various source data sets and identified malicious activities to analyze the root cause and network weaknesses.
Discovers current weaknesses and exploitation methods, along with the residual effects on IT systems and information through root-cause analysis.
Reviews reports and documents regarding security incidents details and outcomes.
Participates in troubleshooting problems and recommending vulnerability conditions.
Partners with security architecture, network engineering and desktop delivery on implementing and improving security controls.
Monitors internal and external threat environments on a continual basis to best protect the organization's assets.