security threat analyst

Capgemini

<div><div><div><div><h2 class="jobSectionHeader"><b>Your role
</b></h2></div><div><ul><li>We're hiring for skilled and motivated <b>Threat Intelligence analyst </b>across <b>PAN India </b>to join our team. The ideal candidate will have <b>4 to 6 years </b>hands-on experience with <b>Threat Intelligence, Cyber kill chain.
</b></li><li>Willing to take lead in all the Operational aspects of TI
</li><li>Capabilities to drive customer meetings and resolve various issues within the delivery process
</li><li>Monitoring of Security tool events and take appropriate actions across network infrastructure.
</li><li>Maintain awareness of latest cybersecurity adversaries, exploits, vulnerabilities, breaches, global events, and mitigation strategies.
</li><li>Maintain an understanding of the overall threat landscape (cyber, malware, botnets, phishing, DDoS, physical).
</li><li>Collect, analyze, investigate, store, and disseminate indicators of compromise (IOCs), threat intelligence.
</li><li>Create content and produce intelligence reports and deliverables using a variety of internal and external sources for various teams.
</li><li>Conduct research on cyber campaigns, adversary tracking, or TTP detections in order to offer insights to the rest of the team and the cyber intelligence community.
</li><li>Additional Remarks for Consideration:
</li>Good to have CEH, CHFI certification/training or any other cyber security certifications&quot;<br>
<li>
</li></ul></div></div><p></p><div><div><h2 class="jobSectionHeader"><b>Your profile
</b></h2></div><div><ul><li>Good to have Cyber Threat Intelligence hands-on experience.
</li><li>Well versed with Cyber Threat Intelligence Life-Cycle &amp; Phases of Cyber kill Chain
</li><li>Conduct research on cyber campaigns, adversary tracking, or TTP detections in order to offer insights to the rest of the team and the cyber intelligence community.
</li><li>Good Understanding of Mitre Framework.=
</li><li>Understanding of APT actors.
</li><li>Good working knowledge of: server platforms (UNIX, Windows etc.), networking, security (Firewalls, IDS/IPS, proxy systems etc.)
</li><li>Operational understanding of TCP/IP and computer networking. Knowledge of the functions of security technologies such as IPS/IDS, Firewalls, Security Information and Event Management tools, etc.
</li><li>Knowledge of IT security best practices, common attack types and detection / prevention methods.
</li><li>IntSights / Recorded Future / Anomali (ThreatStream) / ThreatConnect / Mandiant Advantage/ Flare/ OCT.
</li><li>Scripting and programming Skills with proficiency in one or more of the following: PowerShell, Pearl, Python.
</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>What you'll love about working here
</b></h2></div><div><ul><li>You can shape your career with us. We offer a range of career paths and internal opportunities within Capgemini group. You will also get personalized career guidance from our leaders.
</li><li>You will get comprehensive wellness benefits including health checks, telemedicine, insurance with top-ups, elder care, partner coverage or new parent support via flexible work.
</li><li>At Capgemini, you can work on cutting-edge projects in tech and engineering with industry leaders or create solutions to overcome societal and environmental challenges.</li></ul></div></div></div></div>

Threat Intelligence analyst

T. Rowe Price

<div><div><div>At T. Rowe Price, we identify and actively invest in opportunities to help people thrive in an evolving world. As a premier global asset management organization with more than 85 years of experience, we provide investment solutions and a broad range of equity, fixed income, and multi-asset capabilities to individuals, advisors, institutions, and retirement plan sponsors. We take an active, independent approach to investing, offering our dynamic perspective and meaningful partnership so our clients can feel more confident.</div></div><div></div><div><div>
We believe doing the right thing for our clients and our associates is good business. With a career at the firm, you can expect opportunities to create real impact at work and in your community. You&rsquo;ll enjoy resources to support your career path, as well as compensation, benefits, and flexibility to enrich your life. Here, you&rsquo;ll find a collaborative culture that respects and values differences and colleagues who share a spirit of generosity.</div></div><div></div><div><div>
Join us for the opportunity to grow and make a difference in ways that matter to you.</div></div><div></div><div>
Role Summary<br>
The Senior Cyber Threat Analyst &ndash; Threat Intelligence is responsible for collecting, curating, classifying, reporting, and analyzing cyber threat intelligence to support internal security operations, IT teams, enterprise risk management, and executive leadership.</div><div>
This role involves active collaboration with external partners and cyber intelligence sharing groups to both disseminate and gather intelligence on relevant cyber threats.</div><div>
The analyst will leverage intelligence data to help internal teams proactively identify, assess, and communicate potential threat actor activities that could impact the firm&rsquo;s interests.</div><div></div><div>
Responsibilities</div><ul><li>
Continuously monitor and investigate cyber-enabled threats to the firm, including activity from financially motivated and nation-state-aligned threat actors.</li><li>
Collaborate with legal, HR, insider threat, cybersecurity operations, and fraud teams by providing timely intelligence and support.</li><li>
Track and analyze threat actor tactics, techniques, and procedures (TTPs) targeting the financial services sector.</li><li>
Produce intelligence reports on adversarial attempts to compromise personnel, vendors, or information systems.</li><li>
Maintain awareness of adversarial use of contractors, front companies, and proxy personnel (e.g., DPRK or Iranian IT workers) and assist with due diligence and third-party risk assessments.</li><li>
Develop and maintain intelligence requirements, collection plans, and risk assessments aligned with the Cyber Threat Intelligence (CTI) team&rsquo;s objectives.</li></ul><div></div><div>
Business Knowledge</div><ul><li>
Able to articulate cybersecurity risks and translate them into actionable solutions for technology teams.</li><li>
Deep understanding of the goals and objectives of a cyber analysis program.</li></ul><div></div><div>
Qualifications</div><div>
Required:</div><ul><li>
5+ years of experience in cyber threat intelligence, incident response, or related cybersecurity fields.</li><li>
Experience with APT tracking, open-source intelligence (OSINT), dark web research, and threat actor attribution.</li><li>
Familiarity with nation-state adversary TTPs (e.g., PRC, Russia, Iran, DPRK) targeting financial institutions.</li><li>
Proven ability to work with cross-functional teams, including legal, compliance, HR, and IT.</li><li>
Excellent communication and analytical writing skills, with the ability to brief senior leadership clearly and effectively.</li></ul><div></div><div>
Preferred:</div><ul><li>
Experience working in a 24x7 global enterprise, ideally within the financial sector.</li><li>
Bachelor&rsquo;s degree in Cybersecurity.</li><li>
Certifications such as GCTI, GOSI, CISSP, or Security+.</li><li>
Knowledge of regulatory requirements (e.g., FFIEC, NYDFS, FINRA) related to threat intelligence and risk reporting.</li></ul><div></div><div>
FINRA Requirements</div><div>
FINRA licenses are not required and will not be supported for this role.</div><div></div><div>
Work Flexibility</div><div>
This role is eligible for hybrid work, with up to three days per week from home.</div><div></div><div>
Base Salary Ranges</div><div>
Please review the job posting for the location of this specific opportunity.</div><div></div>
$94,500.00 - $161,000.00 for the location of: Maryland, Colorado, Washington and remote workers<br>
$103,000.00 - $177,000.00 for the location of: Washington, D.C.<br>
$117,000.00 - $201,000.00 for the location of: New York, California<div></div><div>
Placement within the range provided above is based on the individual&rsquo;s relevant experience and skills for the role. Base salary is only one component of our total compensation package. Employees may be eligible for a discretionary bonus, which is determined upon company and individual performance.</div><div></div><div>
Commitment to Diversity, Equity, and Inclusion</div><div>
At T. Rowe Price, our associates are our greatest asset. We thrive because our company culture is built on inclusion and because we sustain a work environment where associates can bring their best selves to work every day. The backgrounds, talents, and experiences of our global associates allow us to embrace new ideas and perspectives that move our business priorities forward and enable us to deliver strong client outcomes. Here, you can expect equal opportunity and fair and consistent treatment for all.</div><div></div><div>
Benefits</div><div><div><div>
We value your goals and needs, at work and in life. As an associate, you&rsquo;ll be supported with resources, benefits, and work-life balance so you can thrive in ways that matter to you.</div></div><div></div><div><div><br>
Featured employee benefits to enrich your life:</div></div><div><ul><li><div>
Competitive compensation</div></li></ul></div><div><ul><li><div>
Annual bonus eligibility</div></li></ul></div><div><ul><li><div>
A generous retirement plan</div></li></ul></div><div><ul><li><div>
Hybrid work schedule</div></li></ul></div></div><div><div><ul><li><div>
Health and wellness benefits, including online therapy</div></li></ul></div><div><ul><li><div>
Paid time off for vacation, illness, medical appointments, and volunteering days</div></li></ul></div><div><ul><li><div>
Family care resources, including fertility and adoption benefits</div></li></ul></div><div></div><div><div><div><br>
Learn more about our benefits.</div></div></div></div><div></div><div>
T. Rowe Price is an equal opportunity employer and values diversity of thought, gender, and race. We believe our continued success depends upon the equal treatment of all associates and applicants for employment without discrimination on the basis of race, religion, creed, color, national origin, sex, gender, age, mental or physical disability, marital status, sexual orientation, gender identity or expression, citizenship status, military or veteran status, pregnancy, or any other classification protected by country, federal, state, or local law.</div></div>

Senior Threat Intelligence Analyst

Eventus Security Pvt. Ltd

<p>We are seeking a <b>dynamic and experienced cybersecurity professional</b> to join our <b>Security Operations Center (SOC)</b> team. If you're a <b>Saudi national</b> passionate about cybersecurity, incident response, and threat intelligence, this is your opportunity to make a national impact.</p><p><b>Location</b>: Saudi Arabia<br/><b>Position</b>: Senior Security Analyst<br/><b>Preference</b>: Saudi nationals<br/><b>Department</b>: Security Operations Center (SOC)</p><p><b>Key Responsibilities</b></p><ul><li>Monitor and analyze security technologies such as IDS/IPS, Firewalls, VPNs, and Switches.</li><li>Investigate and respond to security incidents using <b>SIEM</b> and <b>XDR</b> tools.</li><li>Develop and implement incident response procedures within defined SLAs.</li><li>Perform <b>threat hunting</b>, forensic log analysis, and generate quality security reports.</li><li>Work closely with internal teams and clients to resolve and document incidents.</li><li>Mentor junior analysts and contribute to team knowledge-sharing.</li><li>Create and maintain technical documentation and threat intelligence reports.</li><li>Develop <b>SIEM content</b>, drive <b>automation (SOAR)</b>, and contribute to continuous improvement.</li><li>Engage in <b>on-site incident response</b> activities when needed.</li></ul><p><b>Qualifications &amp; Skills</b></p><ul><li>Minimum <b>4+ years</b> of cybersecurity experience.</li><li>Bachelor&rsquo;s or Master&rsquo;s degree in Cybersecurity, IT Security, or a related field.</li><li>Hands-on experience with <b>XDR</b>, SIEM platforms (Splunk, ArcSight, QRadar, LogRhythm), and incident handling.</li><li>Strong understanding of <b>MITRE ATT&amp;CK</b>, Cyber Kill Chain, and network protocols (TCP/IP).</li><li>Preferred certifications: <b>OSCP, CISSP, CCIE, GCIH, GCIA</b>, etc.</li><li>Ability to analyze and interpret logs from various system and security sources.</li><li>Fluent in <b>English</b>; <b>Arabic</b> is a plus.</li><li>Strong communication, leadership, and mentoring abilities.</li></ul><p><b>Why Join Us?</b></p><ul><li>Be a part of a <b>critical national SOC team</b> protecting vital infrastructure and enterprise networks.</li><li>Work with advanced threat detection tools and contribute to <b>real-time security defense</b>.</li><li>Collaborate with top-tier cybersecurity professionals and grow in a <b>high-impact environment</b>.</li></ul><p><b>Interested candidates (Saudis preferred)</b> can <b>apply now</b> or send their CV to <b>[alisha.mulla@eventussecurity.com]</b> with the subject line:</p><p><b>Application &ndash; Senior Security Analyst &ndash; Saudi Arabia</b></p><p>Job Type: Full-time</p><p>Pay: From &#65020;5,000.00 per month</p><p>Application Question(s):</p><ul><li>Current Salary per month in SAR</li><li>Expected Salary per month in SAR</li><li>Nationality</li><li>Notice Period</li><li>Current Location</li></ul><p>Experience:</p><ul><li>SOC: 3 years (Required)</li></ul><p>Location:</p><ul><li>Jeddah (Required)</li></ul>

Senior Security Analyst

Eventus Techsol

<p></p><div><div><div>Job Description</div><div><div><p>
Job Title: Security Analyst - L3</p>
<p>
Experience: 5+ years</p>
<p>
Location: Jeddah</p>
<p><b>
Key Responsibility Areas &ndash; </b><b>Security Analyst - L3</b><b> &ndash; SOC</b></p>
<div>
<ul><li><b>Security Incident Leadership: </b>Lead high-priority security investigations and incident response activities, ensuring accurate analysis, containment, remediation, and post-incident reporting.</li></ul>
<ul><li><b>Operational Oversight: </b>Oversee day-to-day SOC operations, including shift handovers, escalation management, and ensuring continuity across a 24/7 environment with global customers.</li></ul>
<ul><li><b>Technical Expertise: </b>Act as the escalation point for complex threats and security incidents requiring deep analysis of logs, packets, malware, and behavioral patterns using EDR, XDR, SIEM, and forensic tools.</li></ul>
<ul><li><b>Threat Detection and Hunting:</b> Conduct proactive threat hunting using various data sources and tools. Create and optimize detection use-cases, correlation rules, and playbooks to enhance threat visibility and reduce dwell time.</li></ul>
<ul><li><b>Process &amp; Playbook Management: </b>Develop, refine, and enforce standard operating procedures (SOPs), playbooks, and incident response workflows to drive consistent and measurable outcomes.</li></ul>
<ul><li><b>Customer Engagement: </b>Interface with global stakeholders (especially US/Canada clients), providing clear incident briefings, RCA reports, and advisory support.</li></ul>
<ul><li><b>Collaboration and Mentorship:</b> Mentor L1 and L2 analysts, conduct training sessions, and support skill development across shifts.</li></ul>
<ul><li><b>Continuous Improvement:</b> Participate in tuning detection content, improving tool configurations, and supporting red/blue/purple team exercises to elevate SOC maturity.</li></ul>
<ul><li><b>Documentation and Reporting:</b> Ensure high-quality documentation of incidents, processes, and technical findings. Contribute to executive and operational reporting.</li></ul>
</div></div></div></div><div></div><div><div><div>
Location</div><div><div>
Jeddah</div></div></div><div><div>
Experience</div><div><div>
5+ years</div></div></div><div><div>
Send Your CV To</div><div><b>
careers@eventussecurity.com</b></div></div></div></div>

Security Analyst - L3

<div><p><b>Title: Cyber Security Analyst
</b><br>
<b>Work Location: Bangalore
</b></p><p><b>Work schedule: Rotational </b><b>(2 days weekly off per week)
</b></p><p><b>Mode: Hybrid
</b></p><p><b>Job Summary:
</b></p><p>We are seeking a skilled and proactive <b>Cyber Security Analyst </b>to join our cybersecurity team. The Analyst will be responsible for monitoring, detecting, analyzing, and responding to cybersecurity incidents in real-time. This role involves working with advanced security tools, conducting initial triage, escalating threats, and helping to ensure the overall security of the organization's digital assets.<br>
</p><p></p><p><b>Key Responsibilities:
</b></p><ul><li>Monitor SIEM dashboards, alerts, and security logs to detect suspicious activities or policy violations.
</li><li>Perform initial triage, investigation, and classification of security incidents.
</li><li>Respond to alerts and incidents following defined incident response procedures.
</li><li>Analyze data from firewalls, IDS/IPS, endpoint protection, email security, and threat intelligence platforms.
</li><li>Escalate critical incidents to Team Lead or incident response teams.
</li><li>Create and maintain incident tickets with detailed findings and actions taken.
</li><li>Contribute to the continuous improvement of SOC processes, use cases, and playbooks.
</li><li>Assist in threat hunting and proactive identification of anomalies across the network.
</li>Generate regular and ad hoc reports on SOC metrics, incident trends, and findings.<br>
<li>
</li></ul><p></p><p><b>Required Skills and Qualifications:
</b></p><ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, or related field (or equivalent experience).
</li><li>2 to 4 years of experience in cybersecurity or SOC operations &amp; Monitoring.
</li><li>Understanding of cybersecurity principles, attack vectors, and threat detection.
</li><li>Experience with SIEM platforms (e.g., Splunk, QRadar, Palo Alto Cortex XSIAM, etc.).
</li><li>Familiarity with common security tools (EDR, IDS/IPS, vulnerability scanners).
</li><li>Strong analytical and problem-solving skills.
</li><li>Good communication skills and ability to work in a fast-paced team environment.
</li>Knowledge of MITRE ATT&amp;CK framework, TCP/IP, DNS, HTTP, and other protocols.<br>
<li>
</li></ul><p></p><p><b>Preferred Qualifications (Nice to Have):
</b></p><ul><li>Industry certifications: <b>Security+ </b>, <b>CEH </b>, <b>GCIA </b>, <b>GCIH </b>, <b>Palo Alto Certified </b>, or similar.
</li>Experience with scripting (Python, PowerShell) or automation (SOAR platforms).<br>
<li>
</li></ul><p></p><p><b>Shift and Work Environment:
</b></p><ul><li>Shift work including nights, weekends, and holidays (24/7 coverage).
</li><li>On-call rotation may apply.
</li>2 days weekly off per week.<br>
<li>
</li></ul><p></p><p>Hands-On Knowledge on below mentioned tools is good to have.
</p><div><ul><li>Palo Alto XSIAM / Cortex XDR
</li></ul><ul><li>Recorded Future
</li></ul><ul><li>Microsoft Defender / O365 Email DLP
</li></ul><ul><li>Proofpoint SEG
</li></ul><ul><li>Zscaler ZIA / ZPA
</li></ul><ul><li>Azure Active Directory / M365
</li></ul><ul><li>Intune / SCCM
</li></ul><ul><li>Virus Total / CISA / CIS Benchmarking</li></ul></div></div>

Cyber Security Analyst

DTS Solution

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Work as a Cyber SOC Tier 1 Analyst in DTS Solution   HawkEye CSOC cyber command center.<br> </li>
 <li>
<i> </i> 
 The security analyst Tier 1 monitors security events from the various SOC entry channels (SIEM, Tickets, Email and Phone), based on the security event severity, escalate to managed service support teams, tier 2 security analyst, and/or customer as appropriate to perform further investigation and resolution.<br> </li>
 <li>
<i> </i> 
 Reviews trouble tickets generated by SIEM Leverages emerging threat intelligence (IOCs, updated rules, etc.) to identify affected systems and the scope of the attack.<br> </li>
 <li>
<i> </i> 
 Reviews and collects asset data (configs, running processes, etc.) on systems for further investigation.<br> </li>
 <li>
<i> </i> 
 Will actively monitor security threats and risks, provide in-depth incident analysis, evaluate security incidents, and will provide proactive threat research.<br> </li>
 <li>
<i> </i> 
 Work closely with the Tier 2 Analyst to assess risk and provide recommendations for improving DTS Solution - HawkEye CSOC s customer security posture.<br> </li>
 <li>
<i> </i> 
 Participate in security incident management and vulnerability management processes. Identify, perform, review or track security incident investigations to resolution and identify lessons learnt.<br> </li>
 <li>
<i> </i> 
 Identify, perform or review root cause analysis efforts following incident recovery to enhance operations.<br> </li>
 <li>
<i> </i> 
 Participate in evaluating, recommending, implementing, and troubleshooting security. solutions and evaluating IT security of the new IT Infrastructure systems.<br> </li>
 <li>
<i> </i> 
 Ensure that corporate data and technology platform components are safeguarded from known threats.<br> </li>
 <li>
<i> </i> 
 Develop, implement and test new SIEM use cases. Regularly identify and develop new use cases for automation and tuning of security tools<br> </li>
 <li>
<i> </i> 
 Provide technical guidance to the customer s technical teams during the configuration of new log sources.<br> </li>
 <li>
<i> </i> 
 Understanding and implementing the SOC processes and procedures.<br> </li>
 <li>
<i> </i> 
 Follow standard operating procedures for detecting, classifying, and reporting.<br> </li>
 <li>
<i> </i> 
 Triage events for criticality and escalate according to predefined processes incidents under the supervision of Tier 2 and Tier 3 staff.<br> </li>
 <li>
<i> </i> 
 Communicate effectively with customers, team-mates, and management.<br> </li>
 <li>
<i> </i> 
 Provide input on tuning and optimization of security systems.<br> </li>
 <li>
<i> </i> 
 Follow ITIL practices regarding incident, problem and change management.<br> </li>
 <li>
<i> </i> 
 Document and maintain customer build documents, security procedures and processes.<br> </li>
 <li>
<i> </i> 
 Stay up to date with current vulnerabilities, attacks, and countermeasures.<br> </li>
 <li>
<i> </i> 
 Reviews the latest alerts to determine relevancy and urgency.<br> </li>
 <li>
<i> </i> 
 Creates new trouble tickets for alerts that signal an incident and require Tier 2 / Incident Response review.<br> </li>
 <li>
<i> </i> 
 Manages and configures security monitoring tools (SIEM, SYSLOG, NETFLOW, FIM, SYSMON etc.)<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 3+ years of experience of network/security architecture or operations experience<br> </li>
 <li>
<i> </i> 
 Experience working on specific SOC/SIEM platforms<br> </li>
 <li>
<i> </i> 
 Excellent experience in Elastic (ELK), Splunk, Wazuh, LogRhythm<br> </li>
 <li>
<i> </i> 
 Experience in SOAR technologies   Demisto, Cybersponse, FortiSOAR, Swimlane<br> </li>
 <li>
<i> </i> 
 Excellent experience in MDR or EDR<br> </li>
 <li>
<i> </i> 
 Experience in using security tools   commercial and open source<br> </li>
 <li>
<i> </i> 
 Experience in defensive technologies   NGFW, AV, VPN, IPS, NETFLOW, DAM, WAF, Proxy, Web Filtering etc. Ability to inspect using PCAP files.<br> </li>
 <li>
<i> </i> 
 Knowledge with Threat Hunting and MITRE ATT&amp;CK Methodology<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 GIAC Certified Intrusion Analyst (GCIA)<br> </li>
 <li>
<i> </i> 
 GIAC Certified Enterprise Defender (GCED) issued by GIAC<br> </li>
 <li>
<i> </i> 
 GIAC Certified Incident Handler (GCIH) issued by GIAC<br> </li>
 <li>
<i> </i> 
 Certified Ethical Hacker (CEH) issued by EC-Council<br> </li>
 <li><br></li></ul></div></div><div><div><div><div><div><div><div> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

SOC Analyst - Tier 1

BrightStar Care

<div></div><div><div><div><b>Local Agency:</b> BrightStar Care<br>
 <div></div><b>Location:</b> Bannockburn, IL<br>
 <div></div><b>Position Type:</b> Full Time (Salaried)<br>
 <div></div><b>Req ID:</b> 160452<br>
</div>The Cybersecurity Analyst is responsible for monitoring, detecting, analyzing, and responding to cybersecurity threats and incidents. This position supports the organization's defense posture by leveraging Microsoft 365 Defender, Microsoft Purview, Azure security tools, and a SIEM platform. The role is aligned with the NIST NICE Cybersecurity Workforce Framework, specifically the System Security Analyst (Work Role ID: PR-CDA-001), and focuses on protecting information systems through analysis, incident response, and threat mitigation activities. &bull; Monitor Security Information and Event Management (SIEM) platforms, including Microsoft Sentinel, for alerts, anomalies, and indicators of compromise (IOCs).<br>
<ul><li>Investigate and triage security incidents using data from Microsoft Defender for Endpoint, Microsoft 365 Defender (Office 365, Identity), Microsoft Purview, cloud firewalls (e.g., Meraki, Azure), and Web Application Firewalls (WAF).</li><li>Identify, assess, and track vulnerabilities across assets using internal and third-party tools; work with system owners to ensure timely remediation.</li><li>Document and report security incidents with clear findings, severity ratings, impact assessments, and remediation recommendations.</li><li>Collaborate across IT, infrastructure, and cloud teams to contain threats, execute incident response actions, and support system recovery efforts. Conduct forensic analysis and advanced threat investigations using KQL queries, audit logs, and endpoint telemetry to determine scope, impact, and attribution.</li><li>Tune detection rules and analytics in SIEM and other security platforms to improve fidelity, reduce false positives, and address evolving threat actor tactics.</li><li>Contribute to the development and refinement of security policies, alert logic, response playbooks, and standard operating procedures.</li><li>Support compliance and audit readiness by monitoring Data Loss Prevention (DLP) policies, insider risk signals, and access control logs.</li><li>Stay current on emerging threats, MITRE ATT&amp;CK techniques, vulnerability disclosures (CVEs), and relevant threat intelligence. Execute assigned projects related to security improvements, risk mitigation, and process optimization.</li><li>Perform other duties assigned to support organizational security objectives. <b>EDUCATION</b></li></ul><ul><li>
Bachelor&rsquo;s degree in computer technology, security or similar field preferred<br>
Relevant security certifications preferred (e.g., Security+, CySA+, SC-200, GCIH, GCIA)</li></ul><b>
EXPERIENCE</b><br>
<ul><li>
A minimum of 4 years of experience in cybersecurity as a security analyst or in a similar technical role</li></ul><b>
SKILLS/ABILITIES</b><ul><li>
Proficiency with various security tools: Defender XDR, Purview, Entra ID, and M365 audit logs</li><li>
Strong understanding of cybersecurity principles, intrusion detection, and incident response processes</li><li>
Experience with SIEM technologies and log analysis tools</li><li>
Understanding of cloud and hybrid environments, including Azure IaaS/PaaS</li><li>
Ability to write technical documentation, incident reports, and security assessments</li><li>
Superb time management skills; meets deadlines</li><li>
Excellent organizational skills with ability to prioritize tickets and tasks; balances support tickets vs. security projects</li><li>
Adaptability: Adapts to changes in the work environment; manages competing demands; adjusts approach as needed to fit the situation</li></ul><b>
WORKING CONDITIONS</b><ul><li>
Travel to the Bannockburn IL office on a quarterly basis</li><li>
Work environment &ndash; Fast-paced, collaborative, and dynamic work environment with a focus on teamwork and meeting tight deadlines</li><li>
Hours &ndash; 8am to 5pm; after hours work as needed, emergency on-call for security incidents</li></ul></div></div>

Search 10000+ Security threat analyst jobs near you this October. New roles added regularly across leading industries. Apply today.

10000 security threat analyst jobs NEAR_ME

Threat Intelligence analyst

Senior Threat Intelligence Analyst

Senior Security Analyst

Security Analyst - L3

Cyber Security Analyst

SOC Analyst - Tier 1

Cyber Security Analyst