Information Security Analyst
📍 Location: Springfield, Massachusetts, United States (Remote)
🏢 Industry: Financial Services
💼 Work Setting: Remote (Continental U.S.) with occasional travel.
Are you passionate about cybersecurity, threat detection, incident response, and leveraging emerging technologies to strengthen security operations? We are seeking an experienced Security Operations Center (SOC) professional to join a high-performing cybersecurity team dedicated to protecting critical business assets and enhancing organizational security capabilities through innovation, automation, and advanced analytical techniques.
The Opportunity In this role, you will collaborate with security analysts, engineers, and cross-functional cybersecurity teams to improve detection, response, threat intelligence, and security automation capabilities. You will play a key role in strengthening security operations through advanced threat analysis, automation, and continuous improvement initiatives while serving as a mentor and technical escalation point for fellow analysts.
Key Responsibilities
Conduct advanced malware investigations and extract actionable Indicators of Compromise (IOCs) to support threat intelligence and detection efforts.
Design, develop, and implement security automation workflows using SOAR and related technologies to streamline SOC operations.
Partner with data science and security teams to enhance security capabilities through AI-driven and agentic solutions.
Collaborate with threat intelligence, engineering, and security operations teams to improve prevention, detection, and threat hunting programs.
Develop, optimize, and fine-tune security monitoring rules to improve alert quality and detection accuracy.
Serve as a senior resource and escalation point for analysts, providing technical guidance, mentorship, and leadership.
Perform quality assurance reviews to ensure investigations, findings, and documentation meet established standards.
Contribute to continuous improvement initiatives that strengthen operational effectiveness and cyber resilience.
Required Qualifications
Bachelor's degree or equivalent combination of education and professional experience.
8+ years of experience in a Security Operations Center or similar cybersecurity-focused role.
1+ year of experience applying Artificial Intelligence technologies to enhance security operations.
2+ years of hands-on experience with Python development.
2+ years of experience working with SOAR platforms and security automation.
Industry-recognized cybersecurity certifications such as CISSP, CISM, CEH, GCIH, GCDA, or equivalent.
Ability to participate in off-hours support and escalation activities when required.
Preferred Qualifications
Degree in Cybersecurity, Information Security, Computer Science, or a related field.
Advanced cybersecurity certifications such as CISSP, CISM, CISA, GCIH, or GCFR.
Strong knowledge of the MITRE ATT&CK framework and adversarial methodologies.
Expertise in Python, PowerShell, or other scripting and automation languages.
Experience utilizing SIEM platforms for large-scale data analysis and threat detection.
Solid understanding of web application security concepts, including common attack vectors and vulnerabilities.
Deep knowledge of Windows, macOS, and Linux operating systems, including process behavior and file system structures.
Experience developing and tuning security detections and monitoring content.
Strong understanding of authentication technologies and identity protocols such as SAML and OAuth.
Hands-on experience securing and monitoring cloud environments, including AWS and Azure.
Advanced knowledge of networking fundamentals, including TCP/IP, DNS, HTTP/S, and packet analysis.
Familiarity with adversary tactics and living-off-the-land techniques leveraging native operating system tools.
Excellent analytical, problem-solving, communication, and stakeholder management skills.
Passion for continuous learning and staying current with evolving cybersecurity threats and technologies.