Note: The job is a remote job and is open to candidates in USA. SoTalent is seeking an Information Security Analyst to join a cybersecurity team in the financial services industry. The role focuses on advanced malware investigations, threat detection, incident response, security automation, AI-driven security capabilities, and continuous improvement of security operations. The analyst will also mentor team members and serve as a technical escalation point.
Responsibilities
- Conduct advanced malware investigations and extract actionable Indicators of Compromise (IOCs) to support threat intelligence and detection efforts
- Design, develop, and implement security automation workflows using SOAR and related technologies to streamline SOC operations
- Partner with data science and security teams to enhance security capabilities through AI-driven and agentic solutions
- Collaborate with threat intelligence, engineering, and security operations teams to improve prevention, detection, and threat hunting programs
- Develop, optimize, and fine-tune security monitoring rules to improve alert quality and detection accuracy
- Serve as a senior resource and escalation point for analysts, providing technical guidance, mentorship, and leadership
- Perform quality assurance reviews to ensure investigations, findings, and documentation meet established standards
- Contribute to continuous improvement initiatives that strengthen operational effectiveness and cyber resilience
Skills
- • Bachelor's degree or equivalent combination of education and professional experience
- • 8+ years of experience in a Security Operations Center or similar cybersecurity-focused role
- • 1+ year of experience applying Artificial Intelligence technologies to enhance security operations
- • 2+ years of hands-on experience with Python development
- • 2+ years of experience working with SOAR platforms and security automation
- • Industry-recognized cybersecurity certifications such as CISSP, CISM, CEH, GCIH, GCDA, or equivalent
- • Ability to participate in off-hours support and escalation activities when required
- • Degree in Cybersecurity, Information Security, Computer Science, or a related field
- • Advanced cybersecurity certifications such as CISSP, CISM, CISA, GCIH, or GCFR
- • Strong knowledge of the MITRE ATT&CK framework and adversarial methodologies
- • Expertise in Python, PowerShell, or other scripting and automation languages
- • Experience utilizing SIEM platforms for large-scale data analysis and threat detection
- • Solid understanding of web application security concepts, including common attack vectors and vulnerabilities
- • Deep knowledge of Windows, macOS, and Linux operating systems, including process behavior and file system structures
- • Experience developing and tuning security detections and monitoring content
- • Strong understanding of authentication technologies and identity protocols such as SAML and OAuth
- • Hands-on experience securing and monitoring cloud environments, including AWS and Azure
- • Advanced knowledge of networking fundamentals, including TCP/IP, DNS, HTTP/S, and packet analysis
- • Familiarity with adversary tactics and living-off-the-land techniques leveraging native operating system tools
- • Excellent analytical, problem-solving, communication, and stakeholder management skills
- • Passion for continuous learning and staying current with evolving cybersecurity threats and technologies
Benefits
- Remote work from the continental U.S.
- Occasional travel
- Mentorship and technical guidance opportunities
Company Overview