threat analyst

NTT DATA

<div><p><b>Make an impact with NTT DATA</b><br>
Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion &ndash; it&rsquo;s a place where you can grow, belong and thrive.</p><p></p><div><b>
Your day at NTT DATA</b><br>
A Security Threat Intelligence and Hunting Analyst is a seasoned subject matter expert, responsible for analyzing and detecting cyber threats and malware impacting the company.<br>
<br>
The main responsibility of this role is to investigate the level of threat posed by an attack and consequently enable the organization to take informed cybersecurity-based business decisions.<br>
<br>
This role plays a key role in gathering, analyzing and synthesizing information about current and potential threats to inform the organization&rsquo;s security strategy.</div><div><b><br>
Key responsibilities:</b><ul><li>
Reads reports, makes risk assessments, works to detect the source of attacks and tests current defenses against threats.</li><li>
Advises on analysis enabling organization to make decisions on how to improve security measures and respond to attacks.</li><li>
Monitors security alerts and maintains awareness of new threats and vulnerabilities in order to identify potential risks.</li><li>
Analyses data from various sources, including network traffic, email logs, malware files, web server logs, DNS records, etc. to identify cybersecurity risks.</li><li>
Develops and maintains threat intelligence databases containing information about cybercrime tactics, techniques, and procedures (TTPs) used by hackers or other actors targeting the organization&rsquo;s assets.</li><li>
Participates in Incident Response activities as necessary to identify and contain new threats.</li><li>
Conducts investigations into potential threats by collecting data from multiple sources and analyzing it to identify patterns or other significant pieces of information that indicate a specific threat may be occurring or has occurred previously.</li><li>
Communicates with senior leaders and also executives and other stakeholders on security matters to raise awareness of potential risks and recommend solutions.</li><li>
Conducts regular audits of security measures to identify vulnerabilities that could be exploited by unauthorized users.</li><li>
Reviews security policies to ensure compliance with industry regulations and best practices.</li><li>
Creates reports about potential threats for internal use by management or external use by customers or other stakeholders.</li><li>
Performs any other related task as required.</li></ul></div><div><b><br>
To thrive in this role, you need to have:</b><ul><li>
Ability to apply critical thinking skills to a situation and make a decision based on the information to hand.</li><li>
Good understanding of computer systems, software and technology in general.</li><li>
Excellent written and verbal communication.</li><li>
Ability to research topics and find information relevant to their work.</li><li>
Ability to interpret large amounts of data and identify important details to identify potential threats and vulnerabilities.</li><li>
Seasoned proficiency in threat hunting methodologies, including familiarity with tools and techniques for proactive detection of threats.</li><li>
Seasoned knowledge of data analysis, log analysis, and behavioral analytics to identify anomalous activities and indicators of compromise (IOCs).</li><li>
Ability to contribute to investigations, perform post-incident analysis, and identify threat actor tactics, techniques, and procedures (TTPs)</li><li>
Seasoned proficiency in threat intelligence analysis, including the ability to collect, correlate, and interpret large volumes of data from multiple sources.</li><li>
Strong analytical and critical thinking skills are required to identify patterns, trends, and potential risks</li><li>
Seasoned knowledge of cybersecurity principles, attack vectors, and defensive strategies is essential.</li><li>
Seasoned familiarity with various security technologies, threat intelligence platforms, and data analysis tools is also necessary.</li></ul></div><div><b><br>
Academic qualifications and certifications:</b><ul><li>
Bachelor&rsquo;s degree or equivalent in computer science, information technology or security or related field.</li><li>
Relevant security certification(s) such as GIAC Certified Forensic Analyst (GCFA), GIAC Certified Forensic Examiner (GCFE), and GIAC Certified Forensic Analyst (GCFACTIA, CompTIA Cybersecurity Analyst (CySA+), GCTI, FOR508 preferred.</li></ul></div><div><b><br>
Required experience:</b><ul><li>
Seasoned demonstrated experience in a similar role.</li><li>
Seasoned demonstrated experience gained within a global technology organization.</li></ul></div><p></p><p><b>
Workplace type</b><b>:
</b></p>Hybrid Working<p></p><p><b>
About NTT DATA</b><br>
NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world&rsquo;s leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&amp;D.</p><p></p><p><b>
Equal Opportunity Employer</b><br>
NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.</p><p></p><p><b>
Third parties fraudulently posing as NTT DATA recruiters</b></p><p>
NTT DATA recruiters will never ask job seekers or candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties who may attempt to impersonate NTT DATA recruiters&mdash;whether in writing or by phone&mdash;in order to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will come from an <b>@nttdata.com</b> email address. If you suspect any fraudulent activity, please <i>contact us</i>.</p></div>

Security Threat Intelligence and Hunting Analyst

Amentum

<div></div><div><div><div><div><div><p><b>RED CELL CYBER ANALYST (Operational Position)
</b></p><p></p><p>The Red Cell Cyber Analyst is responsible for providing direct strategic and tactical analytic cyber support to the DoW Red Cell. The Red Cell Cyber Analyst drives cyber operations by selecting cyber targets, identifying gaps in cyber architecture, and developing cyber emulative courses of action pertaining to specific vulnerability assessments. The Red Cell Cyber Analyst is responsible for providing advice to tactical partner elements and Red Cell personnel in planning adversarial cyber warfare courses of action. The Red Cell Cyber Analyst is responsible for providing advisory support concerning network and infrastructure analysis to enable adversarial cyber and/or electronic warfare operations in support of DoW Red Cell operations. The Red Cell Cyber Analyst will be expected to travel in direct support of vulnerability assessments.</p>
<p></p>
<p>The Red Cell Cyber Analyst acts as subject matter expert on a variety of complex topics related to cyber threats. Specifically, the Red Cell Cyber Analyst is responsible for researching and identifying positions, access points, relationships, organizations, and other potential vulnerabilities in support of DoW Red Cell operations. They are expected to use advanced analytic skills/ tools and maintain knowledge of industry best practices related to cyber red teaming. They report directly to the Red Cell Cyber Analysis Lead.</p>
<p></p>
<p><b>Responsibilities/Tasks</b></p>
<p></p>
<p>The Red Cell Cyber Analyst shall:</p>
<ul>
<li>Characterize the adversary&rsquo;s cyber capabilities. Research the structure, ideology, intentions, tactics, and capabilities of adversarial cyber organizations to develop threat characterization using a combination of both classified and unclassified sources.</li>
<li>Contribute constructively to cyber threat emulation. Identify information requirements, develop assessment cyber strategies, assist building Red Cell collection plans, identify information sources, and develop and conduct research of publicly available information (PAI) in order to determine adversary cyber courses of action and relevant priority information requirements (PIRs).</li>
<li>Identify, map, and plan potential exploitation of key telecommunication networks.</li>
<li>Analyze and characterize cyber systems and conduct analysis appropriate to the program. Identify essential functions, tasks, and critical assets necessary to perform analysis as determined by the program leader.</li>
<li>Develop courses of action that a cyber adversary might employ against customer personnel, equipment, facilities, networks, information and information systems, infrastructure, and supply chains.</li>
<li>Facilitate timely information management flow from DoW Red Cell partner elements and other entities supporting DoW Red Cell operations.</li>
<li>Support field assessments from a cyber adversary perspective.</li>
<li>Synthesize findings to support vulnerability identification, course of action development, protection studies, trend analyses, risk analysis, and mitigation strategies.</li>
<li>Develop a comprehensive understanding of the implications of cyber vulnerabilities discovered and fuse those findings with the systems analysis to determine impacts to the national and military missions they support.</li>
<li>Prepare activity reports including out briefs, senior leader briefs, interim progress reports (IPRs), white papers, after action reviews, final reports, risk analysis products, and other documents necessary to convey assessment findings to customers, partners, and other stakeholders.</li>
<li>Be able to explain network/system mechanisms to non-cyber personnel in order to facilitate better analysis and operations.</li>
<li>Should have a diverse understanding of network and information security operations, network exploitation, and telecommunications.</li>
</ul>
<p></p><p><b>Required Skills/Qualifications</b></p>
<p></p>
<ul><li>Four-year BS/BA degree with two years applicable experience as a cyber analyst; or associate&rsquo;s degree with four years applicable experience as a cyber analyst; or eight years of applicable experience as a cyber analyst.</li>
<li>Proficient in understanding, analyzing and summarizing comprehensive and complex technical, contractual, and research information/data.</li>
<li>Ability to write about complex topics in a way that will effectively capture and transmit the message to non-cyber personnel.</li>
<li>Ability to communicate complex informational concepts or ideas in a confident and well-organized manner through verbal, written, and visual means.</li>
<li>Ability to accurately and completely source all data used in products.</li>
<li>Ability to develop or recommend analytic approaches to problems for which information is incomplete or for which no precedent exists.</li>
<li>Ability to think like and emulate actions of threat actors.</li>
<li>Possess a current driver's license.</li>
<li>Capable of operating a rental vehicle.</li>
<li><b>Active TS/SCI clearance required.</b></li>
<li><b>U S citizenship required.</b></li>
<li>Travel is up to 20%</li>
</ul>
<p></p><p><b>Desired Skills/Qualifications</b></p>
<p></p>
<ul><li>Understand and be well versed in common cyber threat terminology, vulnerability and penetration test principles and methodologies; possess basic knowledge of cyber incident and response forensics and related current events.</li>
<li>Familiarity with Log Analysis, Packet Analysis OSI Model, Network Architectures, NIST, DIA-CAP, RMF, and Information Operations, threat intelligence activities including the collection of and tracking threat actors, digital forensics incident response; and threat hunting methodologies.</li>
<li>Experience performing attack analysis or Red Cell penetration testing against operational computer networks including experience in Windows Security, Network Security, Linux/Unix Security, Database security, or Mainframe Security.</li>
<li>Knowledge of common computer/network infections (virus, trojan, etc.) and methods of infection (ports, attachments, etc.).</li>
<li>Knowledge of computer networking fundamentals (i.e., basic computer components of a network, types of networks, etc.)</li></ul><br>
<p></p>
</div></div></div></div><p>
</p><p><b>Compensation Details:</b></p>
105,000<p><br>
</p><p>The compensation range or hourly rate listed for this position is provided as a good-faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws.</p><p></p><p><b><br>
Benefits Overview:</b></p><p>
Our health and welfare benefits are designed to support you and your priorities. Offerings include:</p><ul>
<li><p>
Health, dental, and vision insurance</p></li>
<li><p>
Paid time off and holidays</p></li>
<li><p>
Retirement benefits (including 401(k) matching)</p></li>
<li><p>
Educational reimbursement</p></li>
<li><p>
Parental leave</p></li>
<li><p>
Employee stock purchase plan</p></li>
<li><p>
Tax-saving options</p></li>
<li><p>
Disability and life insurance</p></li>
<li><p>
Pet insurance</p></li></ul><p></p><p><i><br>
Note: Benefits may vary based on employment type, location, and applicable agreements. Positions governed by a Collective Bargaining Agreement (CBA), the McNamara-O'Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits.</i></p><p><br>
</p><p><b>Original Posting:</b></p>
02/23/2026 - Until Filled<p>
Amentum anticipates this job requisition will remain open for at least three days, with a closing date no earlier than three days after the original posting. This timeline may change based on business needs.</p><p><br>
</p><p>Amentum is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, sex, sexual orientation, pregnancy (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, ancestry, United States military or veteran status, color, religion, creed, marital or domestic partner status, medical condition, genetic information, national origin, citizenship status, low-income status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law. Learn more about your rights under Federal laws and supplemental language at Labor Laws Posters.</p></div>

Red Cell Cyber Analyst

Navanti Group

<div>
 <strong>
  Project/Team:
 </strong>
 FBI Analyst (Anticipated)
 <br/>
 <br/>
 <strong>
  Location:
 </strong>
 Huntsville, Alabama; Northern Tennessee
 <br/>
 <br/>
 <strong>
  Employment Type:
 </strong>
 Full-Time
 <br/>
 <br/>
 <strong>
  Number of Vacancies:
 </strong>
 11 (plus surge capacity up to 8)
 <br/>
 <br/>
 <strong>
  Clearance Required:
 </strong>
 Active TS/SCI with CI Polygraph
 <br/>
 <br/>
 <ul>
  <li>
   Note: This position has not yet been funded. We are currently soliciting resumes from interested candidates in anticipation of the contract award.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Background
  <br/>
  <br/>
 </strong>
 Join the FBI&rsquo;s Insider Threat Office (InTO) to provide critical analytical support in detecting and mitigating threats from within the organization. As an Analyst, you will gather, evaluate, and report information to identify potential insider threats, support investigations, and protect U.S. national security.
 <br/>
 <br/>
 This role is ideal for professionals with strong analytical skills, attention to detail, and the ability to work effectively in a collaborative, mission-driven environment.
 <br/>
 <br/>
 <strong>
  Core Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Conduct analysis and produce intelligence tailored to InTO requirements.
  </li>
  <li>
   Review and evaluate incoming reports and collection plans.
  </li>
  <li>
   Write clear, concise, and timely reports consolidating disparate information.
  </li>
  <li>
   Develop technical support documents, summaries, and presentations.
  </li>
  <li>
   Present briefings to designated personnel.
  </li>
  <li>
   Access and research classified and open-source databases to identify relevant information.
  </li>
  <li>
   Organize and format information per InTO SOPs.
  </li>
  <li>
   Evaluate and interpret information to support investigative and operational programs.
  </li>
  <li>
   Identify relevant data sources to corroborate findings.
  </li>
  <li>
   Maintain confidentiality and demonstrate professional demeanor under all circumstances.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Minimum Requirements
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   U.S. Citizenship required.
  </li>
  <li>
   Active TS/SCI clearance with CI Polygraph at time of hire.
  </li>
  <li>
   Bachelor&rsquo;s degree (4 years of military or federal experience in a similar program may substitute).
  </li>
  <li>
   4+ years of experience in administrative, analytical, or research roles in national security or operational security.
  </li>
  <li>
   Proficiency with Microsoft Office Suite, Google Chrome, and analytical tools.
  </li>
  <li>
   Strong oral and written communication skills.
  </li>
  <li>
   Ability to work in a team environment and handle sensitive information appropriately.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Experience in insider threat or counterintelligence analysis.
  </li>
  <li>
   Familiarity with FBI procedures and intelligence community practices.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Equal Opportunity Statement
  <br/>
  <br/>
 </strong>
 Navanti Group, LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, protected veteran status, or disability status.
 <br/>
 <br/>
 #CJ
</div>


FBI Analyst (Anticipated)

SafeAeon

<div><p><b>JD for SOC Analyst:</b></p><p><b>
What is a SOC analyst?
</b></p><p>SOC analysts can be understood as the first point of contact to any incident/threat in basic terms. SOC stands for Security Operations Center, and it consists of multiple analysts who work 24x7 rotational shifts to fight against threats that could harm an organization. A SOC analyst generally is responsible for assessing the endpoints and look for vulnerabilities using various tools and technologies. However, the role of a SOC analyst is not limited to this:</p><p>
<b>SOC Analyst Job Duties and Responsibilities:</b></p><ul><li>Evaluate critical security incidents using detection tools</li></ul><p>
. &bull; Investigate event alerts and logs from multiple endpoints.</p><ul><li>Analyze and co-relate logs from the firewall, IDS/IPS, AVs, O365, etc</li></ul><p>
. &bull; Work in a 24x7 pro-active environment and respond to security alerts.
</p><ul><li>Document and report incidents/offenses to the clients</li></ul><p>
. &bull; Use Endpoint detection tools to detect malware across the client&rsquo;s environment.</p><ul><li>Maintain and send monthly, weekly reports and other client-specific documentation.</li><li>Work on industry standard SIEM solutions to analyze incidents and create complex indexed searches.</li><li>Using analytical skills to whitelist False Positives incidents.
</li></ul><p>&bull; Keep yourself updated on security news/vulnerabilities and compose a set of Use Cases. &bull; Use basic scripting knowledge to automate processes.</p><ul><li>Onboarding new clients from scratch and configuring their network environment</li></ul><p>
. &bull; Identifying compromised Endpoints by analyzing payloads/logs and notifying clients</p><p>
. &bull; Work on latest security technologies, including Email filtering, Compliance and Patch management, Syslog management, MDR, and SIEM.</p><h2 class="jobSectionHeader"><b>
Qualifications</b></h2><ul><li><p>
Bachelor' degree in technical background.</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
Additional Information</b></h2><p>
Candidates can apply to recruitment@safeaeon.com</p></div>

SOC Analyst Intern

Bolster

<div><div><div><b>About Bolster</b></div><div><b>
</b></div><div>
Bolster turns the security paradigm upside down and removes threats and digital risks before an attack occurs. Our protection extends beyond the enterprise to customers and partners. Our approach is the antithesis of today&rsquo;s cyber defense strategy, which is to wait for an attack than try and prevent it. Or worse, assume you have been breached and hope you can detect it. We leverage the power of AI to apply deep learning, computer vision, and natural language processing to identify criminal intent on millions of web pages daily. We tirelessly monitor the Internet to find malicious web pages that could cause harm and remove them. We empower companies to take back control of the Internet by continuously eliminating the threats that threaten their business, customers, and brand.
</div><div>
</div><div>We are just getting started, and the future could not be more exciting. We&rsquo;re growing the team in all functions as we transition from a small start-up into the next phase of our journey. We are looking for A-list talent who will have a meaningful impact, solve new challenges, and take ownership of the future of Bolster. If this is you, apply and join our team!</div><div></div><div><br>
As a Threat Hunting Analyst (Pre Sales Support), you will play a critical role in supporting the Sales / Pre-Sales team by demonstrating the strength of our threat detection and investigation capabilities to prospective customers. You will conduct targeted threat investigations, analyze phishing and scam infrastructure, and translate technical findings into impactful insights that support customer acquisition and trust-building.</div><div>
This role bridges Threat Hunting expertise with customer-facing engagement, requiring strong technical depth along with excellent communication skills.</div></div>
<div><div><h3 class="jobSectionHeader"><b>Responsibilities</b></h3><ul><li><ul><li>
Conduct investigative threat hunts for Bolster&rsquo;s prospective customers across web, social media platforms, mobile applications etc.</li><li>
Identify phishing, scam, impersonation, malicious domains, credential harvesting sites, fake login portals, and related attacker infrastructure across multiple modules.</li><li>
Analyze phishing infrastructure including domains, hosting patterns, redirects, phishing kits, cloaking techniques, and attacker tooling.</li><li>
Prepare detailed pre-sales investigation reports, executive summaries, and technical findings tailored to customer audiences.</li><li>
Partner closely with Sales team during demos and proof-of-concept (POC) engagements.</li><li>
Support RFP/RFI responses with technical inputs related to threat hunting, detection capabilities, and investigative workflows.</li><li>
Generate periodic and ad-hoc reports highlighting threat activity and detection insights.</li><li>
Contribute to internal knowledge repositories and reusable investigation playbooks for pre-sales use cases.</li></ul></li></ul></div></div>
<div><div><h3 class="jobSectionHeader"><b>Required Skills / Qualifications</b></h3><ul><li><ul><li>
2+ years of hands-on experience in threat hunting, with prior experience in supporting Pre-Sales team, or customer demos in a cybersecurity environment.</li><li>
Strong understanding of threat hunting methodologies and the threat intelligence lifecycle.</li><li>
Ability to work independently in a fast-paced, SLA-driven environment.</li><li>
Experience analyzing phishing emails, websites, SMS, ads, domain abuse, and social media impersonation.</li><li>
Familiarity with phishing kits, hosting analysis, domain infrastructure, and attacker tradecraft.</li><li>
Experience working with OSINT tools, enrichment platforms, and large datasets.</li><li>
Ability to translate technical findings into clear, customer-friendly narratives.</li><li>
Strong written and verbal communication skills.</li><li>
Experience in startup or high-growth environments is a plus.</li></ul></li></ul></div></div>
<div><div><b>Why Bolster</b></div><div></div><div><br>
We are the leader in Anti-Phishing AI!</div><div>
</div><div>
Bolster creates a Next-Generation Fraud Prevention SaaS platform &amp; CheckPhish community platform based on pioneering work in Artificial Intelligence-based phishing and scam detection systems.</div><div>
</div><div>
Bolster protects the world&rsquo;s top brands like Zoom, Dropbox, Uber, LinkedIn, Roblox, and other Fortune 500 customers. We are funded by top-tier investors led by Thomvest Ventures and Crosslink Capital. Our team has over 100 years of combined cybersecurity experience at Cisco, Symantec, McAfee, Bell Labs, Open DNS, and Lacework.</div><div>
</div><div>
Our AI/ML technology protects regular citizens from bad actors on the internet, using industry-leading deep learning, computer vision, natural language processing, and machine learning models for highly accurate real-time detection &amp; automated takedown of fraudulent sites at the internet scale.</div><div>
</div><div>
We also brought our technology to the community with CheckPhish, https://checkphish.ai. It is a free tool that protects millions of consumers from daily phishing, fraud, and fake sites. Charities, non-profits, social benefit corps, and schools are targets too. To aid the world, we will give our technology &amp; services for free or at cost to any approved charity, non-profit, or social benefit corporation.</div><div>
</div><div>
Our work is challenging but fun. We're all about shipping elegant, high-leverage products. Bolster cares deeply about collaboration, feedback, and iteration. Trust and respect are deeply rooted in our unique culture. Our inspiring proven leaders are hiring great people, providing super benefits, and impacting the world!</div><div></div><div><b><br>
**PLEASE NOTE THAT THIS ROLE REQUIRES IN OFFICE COLLABORATION/ATTENDANCE 3X A WEEK ****</b></div></div><br>
<div></div>
<div><div>
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</div></div></div>

Security Analyst II, Threat Hunting (Pre-Sales Support)

Systems Limited

<div>
 <p>
  Systems Limited is seeking an experienced
  <strong>
   SOC Analyst &ndash; Level 2 (Tier 2 / Incident Responder)
  </strong>
  to strengthen its cybersecurity operations. This role is responsible for advanced threat investigation, incident response, and containment of security incidents.
 </p>
 <p>
  The candidate will handle escalated alerts from Level 1 analysts, perform in-depth technical analysis, and drive remediation efforts across endpoint, network, and cloud environments. This position serves as the technical backbone of SOC operations and plays a critical role in protecting organizational assets against advanced cyber threats.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Responsibilities:
  </strong>
 </p>
 <ul>
  <li>
   Lead investigation of escalated security incidents from Level 1 SOC analysts
  </li>
  <li>
   Perform root cause analysis and reconstruct attack chains
  </li>
  <li>
   Conduct endpoint, network, and cloud-based forensic investigations
  </li>
  <li>
   Execute containment and remediation actions including endpoint isolation, account disablement, and IOC blocking
  </li>
  <li>
   Develop and optimize custom KQL and detection queries
  </li>
  <li>
   Tune SIEM and XDR rules to reduce false positives and improve detection accuracy
  </li>
  <li>
   Handle advanced incidents such as ransomware attacks, lateral movement, credential compromise, and data exfiltration
  </li>
  <li>
   Map incidents to MITRE ATT&amp;CK framework for structured analysis
  </li>
  <li>
   Prepare detailed incident reports and executive-level summaries
  </li>
  <li>
   Support proactive threat hunting activities
  </li>
  <li>
   Assist with onboarding of new customers and log sources into SOC platforms
  </li>
  <li>
   Mentor and guide Level 1 SOC analysts
  </li>
  <li>
   Participate in Purple Team engagements alongside Red Team exercises
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Requirements:
  </strong>
 </p>
 <ul>
  <li>
   5&ndash;6 years of experience in SOC operations or Incident Response
  </li>
  <li>
   Strong knowledge of Windows and Active Directory security, network security principles, endpoint security technologies, and cloud security fundamentals (Azure and/or AWS)
  </li>
  <li>
   Hands-on experience with SIEM and XDR platforms and understanding of malware behavior and attacker techniques
  </li>
  <li>
   Experience across the full incident response lifecycle with the ability to write and optimize detection queries (KQL preferred)
  </li>
  <li>
   Strong analytical, documentation, and communication skills
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  Location: Khi/ Lhr/ Isb
 </p>
 <p>
 </p>
</div>


SOC Analyst

Arrowstreet Capital LP

<div><p><b>Job Overview
</b></p><p></p><p>We are seeking a Vulnerability Analyst to support and operate our enterprise vulnerability management program as part of the Cybersecurity team. This role responsible for technical vulnerability analysis, risk-based prioritization, and remediation alignment using enterprise vulnerability platform and supporting tools.
</p><p></p><p><b>Responsibilities:
</b></p><ul><li><p>Operate and manage our enterprise vulnerability management platform, including vulnerability discovery, analysis, and lifecycle management.
</p></li><li><p>Triage and prioritize vulnerabilities using CVSS scoring frameworks in conjunction with internal risk methodologies, threat context, and asset criticality.
</p></li><li><p>Analyze vulnerabilities in the context of known exploits, bugs, and active threat activity.
</p></li><li><p>Apply attack frameworks (e.g., MITRE ATT&amp;CK) to evaluate potential attacker techniques, attack paths, and exposure impact.
</p></li><li><p>Define and maintain technical reporting criteria that align vulnerabilities with appropriate remediation teams and the target operating model.
</p></li><li><p>Partner with infrastructure, application, and platform teams to drive remediation outcomes.
</p></li><li><p>Validate findings and investigate false positives through system, service, and configuration review.
</p></li><li><p>Operate comfortably in Linux-based environments, including command-line troubleshooting and service inspection.
</p></li><li><p>Troubleshoot, optimize, and implement technical configurations and plugin modifications to enhance scanning processes and improve outcomes.
</p></li><li><p>Participate in the Cybersecurity team&rsquo;s on-call and escalation rotation.
</p></li></ul><p></p><p><b>Qualifications:
</b></p><ul><li><p>3&ndash;5 years of hands-on cybersecurity experience, preferably in vulnerability management or security engineering.
</p></li><li><p>Experience operating vulnerability scanning platforms such as TenableOne Nessus, Rapid7 InsightVM, OpenVAS and/or Qualys VMDR.
</p></li><li><p>Strong working knowledge of Vulnerabilities, exploits, and common attack vectors, CVSS scoring and risk-based prioritization, Linux operating systems and command-line tools as well as MITRE ATT&amp;CK framework or similar attack frameworks.
</p></li><li><p>Ability to translate technical vulnerability data into actionable remediation guidance.
</p></li><li><p>Ability to define, measure, and report on key risk indicators (KRIs) and key performance indicators (KPIs).
</p></li></ul><p></p><p>In addition, experience with any of the following would be valuable:
</p><ul><li><p>Exposure to red team, purple team, or offensive security activities.
</p></li><li><p>Experience mapping vulnerabilities to attacker techniques or simulating adversary behaviour.
</p></li><li><p>Familiarity with threat intelligence or exploit research.
</p></li><li><p>AWS/Azure cloud or hybrid environment exposure.
</p></li><li><p>Scripting or automation experience (Python, Bash) is a plus.
</p></li><li><p>Understanding of FAIR framework or similar methodologies is a plus.
</p></li><li><p>Experience with CSPM or similar technologies is a plus.
</p></li></ul><p></p><p>The base salary range for this position is $80,000 - $135,000 per year.
</p><p></p><p>Arrowstreet Capital operates a robust talent acquisition program, and we also seek to compensate and reward our employees competitively within our industry and in line with our merit-based culture. Our approach to total compensation includes base salaries and annual discretionary bonuses, as well as a robust benefits package. The determination of a successful candidate&rsquo;s base salary placement within the listed range will vary based on the candidate&rsquo;s relevant experience and qualifications (which may also include relevant certifications, credentials and other education), the job responsibilities and scope, the commensurate resulting level of the position and other relevant factors. The listed range is also an estimate, and additional information regarding base salary and other elements of total compensation offered by Arrowstreet Capital to successful applicants will be communicated during the recruitment process.
</p><p></p><p>Arrowstreet Capital is a Boston-based systematic investment firm that manages global equity portfolios for institutional investors around the world.
</p><p></p><p>All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, ancestry, genetic information, age, pregnancy, medical condition, disability, veteran or military status, marital status or any other characteristic protected by federal, state, or local law.
</p><p></p><p>Arrowstreet Capital is committed to working with and providing reasonable accommodations for qualified individuals with disabilities and disabled veterans. If you need a reasonable accommodation for any part of the employment process due to a disability, contact us to discuss the nature of your request and contact information.</p></div>

Vulnerability Analyst

Search 3320+ Threat analyst jobs near you this March. New roles added regularly across leading industries. Apply today.