Description
Overview
Check you match the skill requirements for this role, as well as associated experience, then apply with your CV below.
In this role you will lead the firm’s cyber threat investigations and act as incident commander for critical events, guiding rapid, coordinated responses. You will analyze security telemetry, log data, and threat intelligence to uncover malicious activity and assess impact. You will develop threat reports and create dashboards to help teams detect patterns and prioritize risks. You will collaborate with development teams to enhance security capabilities and share findings to strengthen defenses. This role sits at the intersection of security, analytics, and AI-enabled cloud architectures, offering meaningful impact on our technology platform.
Compensation / Benefits
fully-paid health care benefitsgenerous parental and family leavevolunteer opportunitiesaffinity groups for women, people of color and LGBT+mental and physical wellness programstuition assistance
Responsibilities
Lead investigations into sophisticated cyber threats and shape defensive actionsServe as incident commander for high or critical incidents, coordinating response and stakeholdersAnalyze and correlate security telemetry, logs, and threat intelligence to identify malicious activity and impactDevelop threat intelligence reports detailing findings, mitigations, confidence levels, and implicationsCreate dashboards and visualizations to improve detection and response decisionsHunt for advanced adversary activity using analytics and system knowledgePartner with development teams to define security requirements and enhancementsDocument investigatory findings and lessons learned to strengthen detection logic and proceduresBrief technical teams, business stakeholders, and leadership on active threats and recommended actions
Key requirements
10+ years of experience in intelligence, information security, network forensics, insider threat, or security operationsKnowledge of key global threat areas affecting financial institutions, APTs, and actor motives/actionsExperience with Splunk and creating visualizations/dashboards for security monitoringStrong ability to analyze, xklufbp correlate, and synthesize threat data into clear conclusionsProven skill in log file analysis and producing threat intelligence reports with mitigations and confidence levelsExtensive experience applying analytics, network diagrams, and related knowledge to understand systems and adversariesAbility to work with development teams to articulate security requirements for toolsExcellent written and verbal communication, including executive-level reporting for diverse audiencesAbility to document findings and create detailed security tradecraft reportsclear communicationcollaborationanalytical thinkingSplunklog analysisthreat intelligence