Note: The job is a remote job and is open to candidates in USA. SoTalent is seeking an experienced Information Security Analyst to join a cybersecurity team protecting critical business assets in the financial services industry. The role focuses on advanced threat analysis, incident response, security automation, threat intelligence, detection engineering, and mentoring analysts while improving cyber resilience.
Responsibilities
- Conduct advanced malware investigations and extract actionable Indicators of Compromise (IOCs) to support threat intelligence and detection efforts
- Design, develop, and implement security automation workflows using SOAR and related technologies to streamline SOC operations
- Partner with data science and security teams to enhance security capabilities through AI-driven and agentic solutions
- Collaborate with threat intelligence, engineering, and security operations teams to improve prevention, detection, and threat hunting programs
- Develop, optimize, and fine-tune security monitoring rules to improve alert quality and detection accuracy
- Serve as a senior resource and escalation point for analysts, providing technical guidance, mentorship, and leadership
- Perform quality assurance reviews to ensure investigations, findings, and documentation meet established standards
- Contribute to continuous improvement initiatives that strengthen operational effectiveness and cyber resilience
Skills
- Bachelor's degree or equivalent combination of education and professional experience
- 8+ years of experience in a Security Operations Center or similar cybersecurity-focused role
- 1+ year of experience applying Artificial Intelligence technologies to enhance security operations
- 2+ years of hands-on experience with Python development
- 2+ years of experience working with SOAR platforms and security automation
- Industry-recognized cybersecurity certifications such as CISSP, CISM, CEH, GCIH, GCDA, or equivalent
- Ability to participate in off-hours support and escalation activities when required
- Degree in Cybersecurity, Information Security, Computer Science, or a related field
- Advanced cybersecurity certifications such as CISSP, CISM, CISA, GCIH, or GCFR
- Strong knowledge of the MITRE ATT&CK framework and adversarial methodologies
- Expertise in Python, PowerShell, or other scripting and automation languages
- Experience utilizing SIEM platforms for large-scale data analysis and threat detection
- Solid understanding of web application security concepts, including common attack vectors and vulnerabilities
- Deep knowledge of Windows, macOS, and Linux operating systems, including process behavior and file system structures
- Experience developing and tuning security detections and monitoring content
- Strong understanding of authentication technologies and identity protocols such as SAML and OAuth
- Hands-on experience securing and monitoring cloud environments, including AWS and Azure
- Advanced knowledge of networking fundamentals, including TCP/IP, DNS, HTTP/S, and packet analysis
- Familiarity with adversary tactics and living-off-the-land techniques leveraging native operating system tools
- Excellent analytical, problem-solving, communication, and stakeholder management skills
- Passion for continuous learning and staying current with evolving cybersecurity threats and technologies
Benefits
- Remote work from Springfield, Massachusetts, United States (Continental U.S.)
- Occasional travel
Company Overview