Senior Cyber Security Analyst (R-19638)

Key Responsibilities:

• Lead high-fidelity alert investigations, performing deep technical analysis to rapidly identify, contain, and remediate threats
• Own complex incident investigations, driving technically precise conclusions and elevating the organization's detection and response maturity
• Champion process development by identifying gaps, designing scalable workflows, and implementing improvements that strengthen the incident response program
• Create and refine technical playbooks, documentation, and response guides to ensure clarity, consistency, and operational excellence across the program
• Provide mentorship, guidance, and coaching to less experienced analysts to support skill development and operational readiness
• Serve as the escalation point for critical and ambiguous cases, applying advanced threat analysis and sound judgment under pressure
• Collaborate with cross-functional stakeholders to resolve incidents holistically and drive organization wide security improvements
• Apply analytical and technical expertise to continuously enhance security operations processes, workflows, and response capabilities
• Contribute to the evolution of the detection landscape by partnering with technical stakeholders to improve log ingestion, alert logic, and signal quality
• Assess and mitigate AI-related security risks, including model misuse, prompt injection, data leakage, and emerging automation attack vectors
• Participate in an on-call rotation, responding to high-severity incidents as a subject matter expert

Key Skills:

• Bachelor's degree in Computer Science, Information Security, or a related field
• Minimum of eight years of experience in incident response, security operations, or a related field
• At least one SANS/GIAC certification, with GCIH, GREM, or GCFA preferred
• Hands-on experience with SIEM platforms, including splunk and microsoft sentinel
• Hands-on experience with EDR tools, including crowdstrike and carbon black
• Experience working in cloud environments, including Azure, AWS, GCP, and AliCloud
• Proficiency in network log analysis, including NetFlow and PCAP files
• Deep working knowledge of the Mitre Attack framework and its application to threat detection and response
• Strong understanding of malware behavior, exploitation techniques, and Windows, Linux, and macOS internals
• Ability to analyze scripts across multiple languages, including JavaScript, VBScript, PowerShell, and Python
• Experience conducting malicious binary analysis across Windows, macOS, and Linux platforms
• Strong written and verbal communication skills, with the ability to present technical findings clearly to peers and senior leadership
• Proficiency in Microsoft Office Suite
• Show an ownership mindset in everything you do; be a problem solver, be curious and be inspired to take action, be proactive, seek ways to collaborate and connect with people and teams in support of driving success
• Continuous growth mindset, keep learning through social experiences and relationships with stakeholders, experts, colleagues and mentors as well as widen and broaden your competencies through structural courses and programs
• Where applicable, fluency in English and languages relevant to the working market