Veterans Transition Program Associate, Cyber Operations Engineer

BlackRock•Wilmington, DE

2d•$110,000 - $138,000•Hybrid

About The Position

The Veterans Transition Program is designed to support veterans in making the transition from military life to the civilian workforce. The Program offers participants the opportunity to work at the world’s largest asset manager for six months. On completion of the Program, successful participants will be offered permanent employment at BlackRock. Over the course of the Program, participants will: Join teams and have an immediate impact; Immerse themselves in the work of their teams; Gain an understanding of how BlackRock serves its clients; Be supported through training and mentorship; Get exposure to senior leaders; Participate in social and networking opportunities. The program begins with an orientation where you’ll learn about BlackRock’s principles, mission, purpose, and culture. You’ll learn about the asset management industry and get an in-depth look at how BlackRock serves its clients. Following orientation, you’ll join your team and gain insights into the day-to-day life of an Associate as you develop subject-matter expertise through on-the-job learning and our industry-leading technology, Aladdin. Join our global team of cyber security experts, protecting our business and developing exciting capabilities on the frontline of cyber defense. Apply your passion and knowledge of cyber security to assist in the investigation of incidents. The Cyber Operations Analyst needs to demonstrate thoughtful knowledge of the evolving cyber threat landscape, BlackRock’s risks, controls and security thresholds and recognize the expertise and importance of differentiated roles within the SOC. BlackRock is committed to building great Cyber Security careers for our people, and we are looking for an individual with a passion for cyber security defense to continue the growth of our exceptional team.

Requirements

Minimum of 2 years of Active Uniformed service
<5 years of civilian work experience
Bachelor’s degree obtained pre- or post-military service
Open to all U.S. Veterans, regardless of rank or branch of service
Must be able to commence employment in October 2026
Intermediate knowledge in system security architecture and security solutions – IDS, Splunk, data loss prevention, next generation anti-malware, etc.
Intermediate knowledge of networking fundamentals (TCP/IP, Network Layers, etc.).
Intermediate knowledge of malware operation and indicators.
Intermediate knowledge of current threat landscape (threat actors, APT, cyber-crime, etc.).
Intermediate knowledge of security related technologies and their functions (IDS, IPS, FW, WAF, SIEM, DLP, Proxy, next gen anti-malware etc.).
Intermediate knowledge of Windows and Unix or Linux.
Intermediate knowledge of Firewall and Proxy technology.
Intermediate knowledge of malware operation and indicators.
Intermediate knowledge of penetration techniques.
Advanced event analysis leveraging SIEM tools.
Advanced incident investigation and response skill set.
Advanced log parsing and analysis skill set.
Strong oral and written communication skills.
Attention to detail.

Nice To Haves

4+ years of experience in security operations center, or similar security technical and operational role is preferred.
University Degree.
MBA, CISSP, CISM, GCHI, CEH, CCNA, or GIAC are preferred.
Action-oriented attitude and willingness to roll up sleeves.
Advanced knowledge of ServiceNow a plus.

Responsibilities

Acts as an escalation point for regional information security incidents and support the response to incidents impacting the region and/or occurring during regional business hours.
Performs daily review of reports and alerts to identify Information Security events for further investigation while escalating exceptional events as necessary.
Act as a mentor for more junior team members.
Performs investigation and escalation for complex or high severity security threats or incidents.
Ensures that all identified events are promptly validated and thoroughly investigated.
Collaborates with technical teams to identify, resolve, and mitigate events.
Provides advice and guidance on the response action plans for information risk events and incidents based on incident type and severity.
Assists with containment of threats and remediation of environment during or after an incident.
Regularly develop new and interesting use cases for future SIEM logic.
Participate in cyber threat hunts in support of the global cyber operations function.
Assist with forensics investigations.
Participate in the creation, modification and maintenance of all Cyber Monitoring policies and procedures.
Keep abreast of cyber security trends and the emerging threat landscape in general and as it relates to BlackRock.
Deliver timely and detailed documentation related to any incident including the findings, review and follow-up activities.