senior cyber security analyst

MANTECH

<div>MANTECH seeks a motivated, career and customer-oriented Senior Cyber Security Analyst to join our team in Virginia Beach, VA. This is an on-site position.
As a Senior Cyber Security Analyst, you will provide direct support to the Advance Electronic Systems (AES) team and its customers in support of Risk Management Framework (RMF) activities. This role focuses on security control implementation, assessment, continuous monitoring, and RMF compliance, with primary emphasis on Linux systems and supporting knowledge of Windows environments. You will serve as the point of contact for all cybersecurity-related matters, including security control implementation, documentation, and compliance activities
Responsibilities include, but are not limited to:<ul><li>
Prepare for Risk Management Framework (RMF) execution and perform system categorization by conducting comprehensive mission analysis, defining the authorization boundary with detailed network diagrams, hardware/software inventories, and data flow documentation. Determine mission criticality and apply relevant overlays to establish the appropriate security control baseline per NIST SP 800-53 Rev 5 and DoD/Navy policy.</li><li>
Select, tailor, implement, and assess security controls using DISA STIGs (with emphasis on Linux platforms), SRGs, SCAP, ACAS/Nessus vulnerability scans, and NIST SP 800-53A Assessment Procedures. Perform hands-on configuration, hardening, log analysis, and remediation on Linux systems, while applying equivalent controls and STIGs to Windows endpoints. Execute testing, validate configurations and access controls, document implementation status, test results, and evidence in eMASS, and manage POA&amp;M entries with complete risk analysis.</li><li>
Support system authorization by maintaining a complete and accurate RMF package in eMASS, including the SSP, POA&amp;M, and supporting documentation. Coordinate workflow actions for Authorizing Official decision-making.</li><li>
Conduct continuous monitoring by implementing the System Level Continuous Monitoring (SLCM) Strategy, with focus on Linux system logs and security events alongside Windows endpoint monitoring.</li><li>
Conduct Annual Security Reviews (ASRs) and update the System Security Plan (SSP) and POA&amp;M to reflect changes in risk posture.</li><li>
Provide guidance on RMF compliance, risk management, and security strategies across all RMF steps. Advise leadership on emerging threats, control gaps, and mitigation priorities, particularly for Linux environments.</li><li>
Retire and decommission systems at end-of-life. Execute data sanitization per DoD 5220.22-M, hardware disposition, and documentation closeout.</li></ul>
Minimum Qualifications:<ul><li>
Bachelor&rsquo;s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or related field</li><li>
Certified Information Systems Security Professional (CISSP) certification</li><li>
Server 2016 Certification; IT Level III; CWF</li><li>
8+ years of combined experience in RMF processes and secure system implementation and maintenance in DoD environments, with at least 4+ years of hands-on experience securing Linux systems and working knowledge of Windows environments.</li><li>
Deep expertise in applying DISA STIGs to Linux operating systems in air-gapped and/or classified DoD environments.</li><li>
Experience with utilizing operating systems, including real-time operating systems. This includes: QNX, Linux, VXWorks, LynxOS, Microsoft XP embedded, Microsoft IoT, and Microsoft Windows.</li><li>
Security+ CE certification with documented ACAS and eMASS training.</li><li>
Hands-on experience with eMASS for RMF package management, POA&amp;M maintenance, and risk assessment.</li><li>
Proficiency with ACAS/Nessus vulnerability scanning, analysis, and remediation of findings from DISA STIGs, SRGs, and SCAP.</li></ul>
Preferred Qualifications:<ul><li>
Familiarity with network topology documentation in air-gapped environments.</li><li>
2+ years executing full SDLC in DoD environments.</li><li>
Experience with the development in low level (machine) to very high level (abstract, goal oriented) programming languages and frameworks, including C/C++/C#, Python, JavaScript, TypeScript and Angular/React.</li><li>
Certified in CompTIA Linux +, Governance, Risk and Compliance (CGRC), CompTIA SecurityX</li></ul>
Clearance Requirements:<ul><li>
Must be a US Citizen and hold an active Secret Security Clearance (with ability to obtain Top Secret if required).</li></ul>
Physical Requirements:<ul><li>
Must be able to remain in a stationary position 50% of the time.</li><li>
Needs to occasionally move about inside offices, shipboard spaces, or industrial environments to access equipment and systems.</li><li>
Frequently communicates with co-workers, management, and customers, and must be able to exchange accurate information in these situations.</li></ul></div>

Senior Cyber Security Analyst

Oman Arab Bank

<div>
 
 
 
 Purpose and Summary
 
 :
 
 
 <ul>
 <li>
 To primarily ensure Bank acts in accordance with its internal policies, external compliance requirements, and risk appetite through the alignment of strategy with organizational objectives.
 </li>
 <li>
 To ensure the operational environment remains secured, managing risk to acceptable level by analyzing risk probability, impact and prioritizing control implementation.
 </li>
 </ul>
 
 
 
 
 
 
 Key Deliverables:
 
 
 
 <ul>
 <li>
 Develop, implement, and maintain Information Security policies, standards, and frameworks in line with regulatory demands and new international standard practices.
 </li>
 <li>
 Overseeing Information Security compliance to ensure adherence to the bank&rsquo;s security policies and standards.
 </li>
 <li>
 Preparing MIS Trackers, Reports and Dashboards for the management.
 </li>
 <li>
 Perform Information security risk assessment against industry standard security framework/policies for IT/IS risks
 </li>
 <li>
 Document, Approve and Progress the Implementation of the Information Security Awareness Program Employees &amp; Customers.
 </li>
 <li>
 Develop and report on program execution KPIs to the ISWG (IS workgroup) on monthly, quarterly and annual basis.
 </li>
 <li>
 Maintain the CBO, SWIFT &amp; PCI-DSS compliance tracking. Produce the reports and dashboard. Ensure to share the report and dashboard with the ISWG (IS Workgroup) on monthly basis. Ensure timely closure, escalation of the action items and track / record activities in auditable format
 </li>
 <li>
 Report any violation to approved security policies and provide recommendations.
 </li>
 <li>
 Logs all InfoSec related Incidents and track for closure of the incidents and maintain risk register.
 </li>
 <li>
 Conduct research and gain awareness of latest information security trends.
 </li>
 <li>
 Liaise with different entities on security events or global threats.
 </li>
 <li>
 Liaise with different team members to deploy security controls recommended by vendors and by Information security team.
 </li>
 </ul>
 
 
 
 
 
 
 Qualifications
 
 :
 
 
 <ul>
 <li>
 Degree in Information Security/IT or equivalent.
 </li>
 <li>
 Preferred Professional Information Security Certification or equivalent.
 </li>
 <li>
 ITIL v3(Information Technology Information Library)
 </li>
 <li>
 ISO/IEC 2013:27001 Lead Implementer
 </li>
 <li>
 ISO/IEC 2013:27001 Lead Implementer
 </li>
 <li>
 CEH (Certified Ethical Hacking)
 </li>
 </ul>
 
 
 
 
 
 
 Skills/Knowledge
 
 :
 
 
 <ul>
 <li>
 Leadership Skills
 </li>
 <li>
 Effective Communication skills.
 </li>
 <li>
 Strong Risk Analysis skills.
 </li>
 <li>
 Attention to Details.
 </li>
 <li>
 Problem-Solving skills.
 </li>
 <li>
 Coordination skills.
 </li>
 <li>
 Teamwork skills.
 </li>
 <li>
 Reporting skills.
 </li>
 <li>
 Research skills
 </li>
 <li>
 Assessment skills.
 </li>
 <li>
 Sound Arabic &amp; English Languages skills.
 </li>
 </ul>
 
 
 
 
 
 
 
 
 
 Experience
 
 :
 
 
 <ul>
 <li>
 5 to 8 years of relevant experience.
 </li>
 </ul>
 
 
</div>

Senior Cyber Security GRC Analyst

Naufar

<div>
 
 
 JOB PURPOSE:
 
 
 
 The Cyber Security Analyst creates a comprehensive program for establishing a Healthcare carrier-class Security Operation Center. S/he develop and maintain threat monitoring and security incident response procedures within Naufar. The analyst designs frameworks, procedures, and toolkits to enhance capabilities in professional forensic collection and digital evidence analysis. S/he also develop dashboards for reporting the organization's threat landscape, Awareness and security posture to senior management. This role is expert role with roles and responsibilities.
 
 
 
 
 
 
 Description
 
 
 <ul>
 <li>
 Develops and implements a cyber-security program to enhance Naufar capabilities regarding Cyber Attack incident monitoring, incidents response and intrusive and non-intrusive forensics capabilities.
 </li>
 <li>
 Develops and matures the service capabilities of the SOC, such as Forensics, Threat Management, Penetration Assessments, and Tool Management.
 </li>
 <li>
 Develops, Contributes and maintains of the cyber security strategy.
 </li>
 <li>
 Implements, configures and maintains security control and process, to ensure threat indicators are rated by severity and responded to in a manner consistent with the threat.
 </li>
 <li>
 Identifies deficiencies and recommends corrective action to strengthen information security control and decrease the risk of data breach.
 </li>
 <li>
 Maintains and updates standard operation policies and procedures for incident response plans, e-discovery processing, remote acquisition/analysis tools, collections and forensic analysis techniques.
 </li>
 <li>
 Maintains industry standard tools and processes used for forensic analysis and eDiscovery collections and processes.
 </li>
 <li>
 Monitors security alerts for potential events/incidents as well as trending and historical analysis and ensuring all incident reports are complete and written within standard operations and ensures ticket audits and reviews are completed
 </li>
 <li>
 Utilizes leading forensic software to identify, collect, preserve and analyze electronic data from laptops, desktops, servers, email archives, infrastructure logs, network file servers, backup tapes, cell phones, PDAs and a wide variety of other media devices.
 </li>
 <li>
 Manages requests for electronic data and digital forensic investigations that relate to Litigation, Regulatory matters, Compliance, and Employee Investigations.
 </li>
 <li>
 Performs cybersecurity incident analysis and assist with incident response, including analysis of network content and metadata for investigations or malware detection and identifies the cause and extent of a breach.
 </li>
 <li>
 Serves as a subject matter expert and technical advisor in matters relating to the proper collection, preservation, packaging, and submission of digital and multimedia evidence.
 </li>
 <li>
 Participates in incident electronic evidence collection activities in major field investigations. Ensures evidence handling requirements are met.
 </li>
 <li>
 Performs post-incident report according to standard operations.
 </li>
 <li>
 Analyzes the tools and methodology used for investigation and accordingly presents improvements in control and corrective actions if any.
 </li>
 <li>
 Escalates and works with senior management on resolutions to overdue security items or any negative trends identified.
 </li>
 <li>
 Develops focused reporting and briefings for advanced cyber threats.
 </li>
 <li>
 Conducts studies and research for improving forensic analyses, scientific methods, and resolving forensic examination problems.
 </li>
 <li>
 Creates detailed, professional documentation and reports, including performance metrics and presentations for management.
 </li>
 <li>
 Leads or contributes to key projects related to corporate threat monitoring, forensics or information security initiatives.
 </li>
 <li>
 Facilitates group risk assessment activities and identifies any security-related process improvement opportunities.
 </li>
 <li>
 Monitors and performs trending on root cause analysis activities within assigned group and participates as needed to resolve clinical systems security related incidents.
 </li>
 <li>
 Assists on monitoring compliance with information security policies, standards and ENTERPRISE-WIDE strategy and facilitates threat and vulnerability evaluations on a regular basis. Measures and reports on the effectiveness of information security controls.
 </li>
 <li>
 Supports the security initiatives, corrective and preventative actions, and security measures by ensuring timely updates and escalating concerns and non-compliances.
 </li>
 <li>
 Understands and maintains the appropriate knowledge of Security Technologies, (Firewall, Anti-Virus, Email and Web Encryption, HIPS, NIPS, SIEM, WAF, DLP), security procedures, and services within Naufar IT Security as well as ensures all tools are functioning properly.
 </li>
 <li>
 Keeps up to date on changes to significant regulatory and applicable standards issued by internal or external agencies, as applicable to the Naufar&rsquo;s domain.
 </li>
 <li>
 Adheres to Naufar&rsquo;s standards as they appear in the Code of Conduct and Conflict of Interest policies
 </li>
 </ul>
 
 
 
 
 
 Academic Qualifications:
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree &ndash; IT - Mandate
 </li>
 <li>
 Master&rsquo;s degree &ndash; Cybersecurity - Desired
 </li>
 </ul>
 
 
 
 
 
 Experience Requirements:
 
 
 <ul>
 <li>
 5+ years of experience working as a security analyst or SME within a Security Operations Center with exposure to cyber security collection, analysis and threats management, investigation and digital forensics.
 </li>
 <li>
 Demonstrated experience in threat detection and analysis, incident response, and reporting.
 </li>
 <li>
 Demonstrated experience with incident response, deep dive forensics, insider threat, cyber and data exfiltration incidents.
 </li>
 <li>
 Demonstrated experience conducting assessments, digital forensic investigations, vulnerability management and incident response.
 </li>
 <li>
 Demonstrated experience with current cyber threats and the associated tactics, techniques, and procedures used to infiltrate computer networks.
 </li>
 <li>
 Demonstrated experience with SEIM products in the detection, response, mitigation, and/or reporting of cyber threats
 </li>
 <li>
 Demonstrated experience in the use of forensic tools (e.g. FTK, Encase, Forensic Toolkit, X-Ways, Linux based tools, etc.)
 </li>
 <li>
 Experienced with (or equivalent) the following regulations and frameworks: PCI, HIPAA, and ISO/IEC 2700x
 </li>
 </ul>
</div>

Cyber Security Analyst

linkco

Job Summary:We are seeking a skilled and detail-oriented Cyber Security Analyst / Expert to protect our organization&rsquo;s systems, networks, and data from cyber threats. The ideal candidate will be responsible for monitoring security systems, identifying vulnerabilities, and implementing effective security measures to ensure business continuity and compliance.Key Responsibilities:<ul><li>Monitor network traffic, systems, and security tools to detect and respond to threats</li><li>Perform vulnerability assessments, penetration testing, and risk analysis</li><li>Implement and maintain security controls, policies, and procedures</li><li>Investigate security incidents and provide timely resolution</li><li>Manage firewalls, antivirus systems, endpoint protection, and intrusion detection systems</li><li>Ensure data protection, backup, and disaster recovery strategies are in place</li><li>Provide IT support and troubleshoot system/network-related issues</li><li>Configure and maintain Active Directory (GPOs) and user access controls</li><li>Manage and support Wi-Fi controllers and network infrastructure</li><li>Conduct regular security audits and compliance checks</li><li>Prepare reports on security incidents, risks, and mitigation plans</li></ul>Requirements:<ul><li>Bachelor&rsquo;s degree in Cyber Security, Information Technology, Computer Science, or related field</li><li>Proven experience as a Cyber Security Analyst / Expert or similar role</li><li>Strong knowledge of network security, firewalls, VPNs, and intrusion detection/prevention systems</li><li>Hands-on experience with security tools and monitoring systems</li><li>Familiarity with operating systems (Windows/Linux) and networking concepts</li><li>Knowledge of threat analysis, malware, and vulnerability management</li><li>Strong problem-solving and analytical skills</li></ul>Preferred / Advantage Qualifications:<ul><li>Certification or experience in ISO 27001 Information Security Management Systems</li><li>Familiarity with NIST Cybersecurity Framework (NIST)</li><li>Experience working with Cybersecurity Maturity Model Certification (CMMC)</li><li>Certifications such as CEH, CISSP, CompTIA Security+, or equivalent will be an added advantage</li></ul>Skills:<ul><li>Strong analytical and troubleshooting skills</li><li>Attention to detail and proactive mindset</li><li>Good communication and reporting skills</li><li>Ability to work under pressure and handle incidents efficiently</li></ul>Job Type: Full-timeApplication Question(s):<ul><li>Expected salary in QAR</li><li>Notice Period</li></ul>Experience:<ul><li>Cyber Security: 5 years (Required)</li></ul>Location:<ul><li>Qatar (Required)</li></ul>Work Location: In person

Cyber Security Analyst / Cyber Security Expert

Cyber Force

<div>Cairo, Egypt Hybrid Full-time</div>
 <div><h2 class="jobSectionHeader">About Cyber Force</h2>

Cyber Force is a cybersecurity consultancy delivering advisory, managed services, and operations to international clients. Our senior-led teams combine governance, engineering, and 24&times;7 response to turn cyber risk into measurable resilience.
<h2 class="jobSectionHeader">
Role Overview</h2>

We are looking for a Junior Cyber Defense Operations Analyst to join our Threat Detection &amp; Response team as a frontline defender. You will monitor, triage, and investigate security alerts across SIEM, EDR, and XDR platforms, perform initial incident analysis, escalate confirmed threats, and maintain shift-based coverage for our managed services clients and on-site engagements. You will also leverage AI-augmented tooling and agentic SOC capabilities that Cyber Force is actively building into its detection and response workflows.
<h2 class="jobSectionHeader">
Key Responsibilities</h2>
<ul><li>Monitor security alerts from SIEM (Elastic SIEM, Microsoft Sentinel), EDR/XDR (Defender XDR) across client environments</li>
<li>Triage and investigate alerts: analyze log data, correlate events, identify IOCs, determine true vs. false positives</li>
<li>Perform initial incident response: collect artifacts, preserve evidence, escalate to Tier 2/3 with structured handoff</li>
<li>Execute detection playbooks aligned with MITRE ATT&amp;CK</li>
<li>Analyze network traffic, endpoint telemetry, and identity/authentication logs</li>
<li>Maintain shift logs, case notes, and client-facing incident reports to SLA standards</li>
<li>Contribute to detection engineering: propose rule improvements, tune thresholds</li>
<li>Leverage AI-augmented tooling and LLM-based tools (Claude, ChatGPT) for alert enrichment and report drafting</li>
<li>Validate AI-generated investigation outputs from agentic SOC capabilities</li>
<li>Participate in purple team exercises and continuous training</li>
</ul><h2 class="jobSectionHeader">Requirements</h2>
<ul><li>Bachelor&rsquo;s in CS, Cybersecurity, IT, or related (or equivalent practical experience)</li>
<li>0&ndash;1 year experience in SOC, cyber defense, or IT security (internships, labs, CTFs count)</li>
<li>At least one cert: CompTIA Security+, CySA+, BTL1, ISACA CCOA, or equivalent</li>
<li>Fluent English (written and spoken)</li>
<li>Foundational knowledge of SIEM, EDR/XDR, and log analysis</li>
<li>Networking fundamentals: TCP/IP, DNS, HTTP/S, firewalls, proxies, VPNs</li>
<li>Familiarity with MITRE ATT&amp;CK and common adversary TTPs</li>
<li>Demonstrated experience using LLM-based tools (Claude, ChatGPT) &mdash; this is a must</li>
<li>Willingness to work rotating shifts (24/7 coverage) and deploy to client sites</li>
<li>Elastic, Microsoft Sentinel, or Defender XDR experience &mdash; a strong plus</li>
<li>VICI VCDA (Viridian Certified Defense Associate) certification &mdash; a plus</li>
<li>French language skills &mdash; a plus</li></ul></div>
 <div><h4 class="jobSectionHeader">Role details</h4>
<div>Location Cairo, Egypt
</div><div>Type Full-time
</div><div>Mode Hybrid</div></div>

Junior Cyber Defense Operations Analyst

Enterprise Products

<div><div>Enterprise Products Partners L.P. is one of the largest publicly traded partnerships and a leading North American provider of midstream energy services to producers and consumers of natural gas, NGLs, crude oil, refined products and petrochemicals. Our services include: natural gas gathering, treating, processing, transportation and storage; NGL transportation, fractionation, storage and import and export terminals; crude oil gathering, transportation, storage and terminals; petrochemical and refined products transportation, storage and terminals; and a marine transportation business that operates primarily on the United States inland and Intracoastal Waterway systems. The partnership&rsquo;s assets include approximately 50,000 miles of pipelines; 260 million barrels of storage capacity for NGLs, crude oil, refined products and petrochemicals; and 14 billion cubic feet of natural gas storage capacity.
Implement and support leading technologies as a member of Enterprise Products&rsquo; IT team. Gain valuable experience with exposure to challenging and dynamic projects in all aspects of our business. Join our highly experienced network of professionals and connect with our creative team.
The Cybersecurity Threats &amp; Risk Analyst will work within the IT Security &amp; Compliance organization to identify, analyze, and help mitigate cybersecurity risks and threats affecting the organization&rsquo;s systems, data, and operations. The ideal candidate will be responsible for assessing cyber risk and monitoring threat actor activity by analyzing security events, vulnerability data, threat intelligence, and security control effectiveness across infrastructure, applications, cloud, endpoint, and data environments. This person will work closely with cyber engineering, cyber architecture, cyber operations, and risk management teams to support detection, investigation, and response efforts, while contributing to a broader understanding of the organization&rsquo;s risk posture and threat landscape. They will also collaborate with IT and business teams to support remediation efforts, improve security visibility, and strengthen day-to-day security operations.
Other responsibilities include, but are not limited to:<ul><li>
Participate in cyber risk and threat analysis activities, including risk assessments, threat monitoring, threat modeling, vulnerability analysis, and evaluation of security control effectiveness.</li><li>
Analyze security alerts, threat intelligence, vulnerability data, and logs to identify potential threats, control gaps, and emerging risks.</li><li>
Document risk findings, threat activity, investigation results, and remediation recommendations in accordance with established risk management standards.</li><li>
Support threat investigations and incident response efforts through analysis, evidence collection, and impact assessment.</li><li>
Conduct and support vulnerability and threat assessments, including tracking risks and validating remediation efforts.</li><li>
Assist with third-party and vendor risk assessments by reviewing documentation and identifying potential risk exposures.</li><li>
Develop and document assessment procedures, test cases, and validation steps used to evaluate security controls.</li><li>
Support the validation and maintenance of security and risk tools (e.g., SIEM, vulnerability scanners, threat intelligence, GRC tools).</li><li>
Identify opportunities to improve threat visibility, risk detection, and analytical workflows.</li><li>
Perform root cause analysis for security incidents, control failures, or recurring threat patterns.</li><li>
Adhere to change management, incident handling, and security governance policies.</li><li>
Monitor environments during significant changes or maintenance activities for potential risk or threat impact.</li><li>
Prepare risk and threat summaries for review by senior analysts, managers, and cross-functional teams.</li><li>
Collaborate closely with cyber engineering, architecture, and operations teams to support remediation and control improvements.</li></ul></div><div>
Qualifications<div></div> 
The successful candidate will meet the following qualifications:<ul><li>
A college or technical school degree is preferred.</li><li>
Experience working in enterprise IT or security environments with diverse technologies and integrations.</li><li>
Foundational knowledge and experience in cyber risk and threat analysis concepts, threat detection and vulnerability assessments, as well as common security controls across infrastructure, applications, cloud, endpoint, and data environments.</li><li>
Working knowledge of security tools and platforms such as SIEM, vulnerability scanners, threat intelligence platforms, or GRC tools.</li><li>
Understanding of common threat frameworks and methodologies (e.g., NIST, MITRE ATT&amp;CK).</li><li>
2&ndash;5 years of applicable professional experience that substantially includes the following:</li><li>
Cyber threat analysis, vulnerability assessment, or security operations support.</li><li>
Reviewing and analyzing security alerts, logs, and threat intelligence.</li><li>
Documenting risk findings, investigations, and remediation recommendations.</li><li>
Experience supporting incident response, investigations, or post-incident analysis is preferred.</li><li>
Experience assisting with third-party or vendor risk assessments is preferred.</li><li>
Strong analytical and problem-solving skills, with attention to detail and the ability to identify patterns and anomalies.</li><li>
Ability to clearly document findings and communicate technical information to senior analysts and cross-functional partners.</li><li>
Self-motivated and able to work with limited supervision while following established procedures.</li><li>
Strong organization and time management skills, with the ability to manage multiple tasks and priorities.</li><li>
Willingness and ability to learn new tools, technologies, and threat techniques as the threat landscape evolves.</li><li>
Ability to work and contribute effectively in a team environment to support overall security and risk management objectives.</li><li>
Relevant cybersecurity certifications are preferred (e.g., Security+, CySA+, GSEC, GCIH, or similar).</li></ul></div><div>
Primary Location: USA-Texas-Houston</div><div>
Shift: Day Job</div><div>
Travel: No</div><div>
Unposting Date: Ongoing</div><div>
Organization: Info Tech</div><div>
Job: Information Technology</div><div>
Job Level: Individual Contributor</div></div>

Analyst, Cybersecurity Threats & Risks

Aegistech

<div>
 
 
 Cyber Incident Response Analyst
 
 
 
 
 
 
 
 The Role:
 
 
 
 As a Cyber Incident Response Analyst, you will be part of the Cyber Defense team that develops and oversees the company's security program, ensuring protection from existing and emerging threats. In close partnership with Security Operations and Threat Intelligence, you will detect, analyze, and decisively respond to security incidents, enrich investigations with timely intelligence, and help drive proactive defenses.
 
 
 Candidates should have a genuine interest in cyber security and a strong grasp of attacker tactics, techniques, and procedures (TTPs). This role requires a detail-oriented, critical thinker who understands how adversaries exploit systems, networks, and people&mdash;and how to respond. Experience applying threat intelligence to investigations and improving detections is highly desirable.
 
 
 
 
 
 
 Primary Responsibilities:
 
 
 <ul>
 <li>
 Coordinate and triage response to cybersecurity events and conduct forensic analysis across endpoints, networks, cloud, and SaaS.
 </li>
 <li>
 Integrate threat intelligence into investigations (e.g., enrich IOCs, map activity to MITRE ATT&amp;CK, identify likely threat actors/TTPs, and assess potential impact).
 </li>
 <li>
 Understand the threat landscape through collaboration with industry peers, FS-ISAC, trust groups, and commercial/open-source intelligence, translating insights into actionable recommendations.
 </li>
 <li>
 Develop, maintain, and operationalize Incident Response playbooks and SOPs; include PIRs (Priority Intelligence Requirements), collection plans, and feedback loops to refine detections.
 </li>
 <li>
 Work closely with the SOC to investigate incidents and deliver containment, remediation, and root cause analysis; produce high-quality intel-informed incident reports.
 </li>
 <li>
 Create and tune detections (e.g., SIEM/SOAR, EDR) using intelligence signals (TTPs, behaviors, YARA/Sigma, where applicable).
 </li>
 <li>
 Produce and present consumable intelligence outputs (e.g., flash alerts, threat overviews, executive briefs) tailored to technical and non-technical stakeholders.
 </li>
 <li>
 Contribute to vulnerability/threat surfacing (e.g., emerging CVEs, exploit trends) and advise on risk-based prioritization.
 </li>
 <li>
 Deliver actionable incident and hunting metrics to management; assess detection coverage and recommend improvements.
 </li>
 <li>
 Follow the end-to-end incident response lifecycle and support post-incident lessons learned with intelligence-driven enhancements.
 </li>
 <li>
 Participate in information-sharing activities (e.g., FS-ISAC submissions) in line with TLP and legal/compliance requirements.
 </li>
 </ul>
 
 
 
 
 
 Required Qualifications:
 
 
 <ul>
 <li>
 Working knowledge of common cyber attacks, tools, and attacker tradecraft; ability to map activity to MITRE ATT&amp;CK and articulate likely TTPs.
 </li>
 <li>
 Demonstrated experience handling security events in critical environments and applying intelligence to accelerate triage and response.
 </li>
 <li>
 Experience analyzing system, application, and cloud/SaaS logs to investigate security and operational issues; comfort enriching with IOCs and behaviours.
 </li>
 <li>
 Hands-on experience with a SIEM (Splunk preferred) for investigations, alert creation, reporting, and threat hunting.
 </li>
 <li>
 Ability to produce clear, actionable intel and incident reports, including executive-ready summaries and visuals.
 </li>
 <li>
 Familiarity with threat intel workflows: collection planning, source evaluation, indicator lifecycle, PIRs, TLP, and feedback loops to detections.
 </li>
 <li>
 Experience with one or more TIPs or intel data sources (e.g., MISP, OpenCTI, Recorded Future) and STIX/TAXII concepts.
 </li>
 <li>
 3+ years of information security experience with a focus on incident response, threat hunting, or threat intelligence.
 </li>
 <li>
 Excellent communication skills for varied business and technical audiences; strong presentation skills.
 </li>
 <li>
 Comfortable working in a fast-paced environment; passion for cybersecurity.
 </li>
 <li>
 Advanced knowledge of network protocols (TCP/IP, HTTP) and operating systems.
 </li>
 </ul>
 
 
 
 
 
 Preferred Qualifications:
 
 
 <ul>
 <li>
 Experience in the financial services industry.
 </li>
 <li>
 Familiarity with threat hunting techniques (hypothesis-driven, ATT&amp;CK-aligned, behavior-based).
 </li>
 <li>
 Windows and Linux administration tools and concepts.
 </li>
 <li>
 Understanding of threat actors and the cybercrime ecosystem, including initial access vectors, monetization paths, and supply-chain/SaaS attack patterns.
 </li>
 <li>
 Exposure to malware/TTP analysis at a functional level (family identification, persistence/discovery behaviors) and creation of detections (e.g., Sigma/YARA) is a plus.
 </li>
 <li>
 Experience producing finished intelligence products (tactical through executive) and briefing senior stakeholders.
 </li>
 <li>
 Relevant certifications (e.g., GCTI, GCFA/GCFR, GCIH, FOR578) or equivalent experience.
 </li>
 <li>
 Familiarity with information-sharing standards and practices (FS-ISAC, TLP) and legal/compliance considerations.
 </li>
 <li>
 Knowledge of cloud provider threat models and telemetry (AWS, Azure, GCP, M365/SaaS).
 </li>
 <li>
 Second language and/or geopolitical awareness for the actor context is a plus.
 </li>
 </ul>
 
 
 
 
 
 Our benefits include:
 
 
 <ul>
 <li>
 Health &amp; Wellness: Health care coverage designed for the mind and body.
 </li>
 <li>
 Flexible Downtime: Generous time off helps keep you energized for your time on.
 </li>
 <li>
 Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills.
 </li>
 <li>
 Invest in Your Future: Secure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs.
 </li>
 <li>
 Beyond the Basics: From retail discounts to referral incentive awards&mdash;small perks can make a big difference.
 </li>
 </ul>
 
 
</div>

Search 10000+ Senior cyber security analyst jobs near you this April. New roles added regularly across leading industries. Apply today.

10000 senior cyber security analyst jobs Near Me

Senior Cyber Security Analyst

Senior Cyber Security GRC Analyst

Cyber Security Analyst

Cyber Security Analyst / Cyber Security Expert

Junior Cyber Defense Operations Analyst

Analyst, Cybersecurity Threats & Risks

Cyber Security Analyst