Senior Cyber Threat Analyst, IT - Security

Ascensus is a technology and service platform powering savings plans across America. The Senior Cyber Threat Analyst will support the Cyber Threat Detection and Response team by operating and improving cyber threat intelligence processes, monitoring security solutions, managing threat detection and response tools, and executing incident response and forensic activities.

Responsibilities:

• Monitoring of all cybersecurity solutions including but not limited SIEM, EDR, Vulnerability Management, Network, FW / IPS, DLP, cloud for suspicious activities
• Develop and maintain 24/7 SOC Tier 1 and Tier 2 cybersecurity SOP and playbooks
• Manage and Monitor threat detection and response tools including but not limited to malware analysis, email analysis, application analysis (SAST/DAST monitoring), network analysis, domain intelligence, threat IOC and feeds, forensic analysis, and sandbox tools
• Manage and maintain key threat intelligence KPIs and reporting capabilities
• Follow digital forensic program and process as directed
• Execute IT incident response plan as directed
• Assist in the performance of penetration testing and yearly managed service assessment

Requirements:

• Minimum 5 years of experience in Information Security
• Great understanding of the cyber threat landscape
• Demonstrable intermediate knowledge of all the following areas: cybersecurity concepts, network protocols, firewalls, IDS/IPS systems, email security, endpoint security, network security, Windows/Linux/macOS systems, cyber threat hunting, malware analysis tools and techniques, cyber threat intelligence, common threat actor TTPs, application security concepts, cloud security fundamentals, Incident Response methodologies
• Be highly inquisitive and never stop asking questions or looking for results
• Knowledge of relevant frameworks, standards, and best practices such as NIST CSF, PCI-DSS, CIS CSCs, MITRE ATT&CK, Cyber Kill Chain etc
• Excellent written and oral communication skills
• The ability to communicate effectively (clear, concise, and professionally) with all levels within Ascensus, auditors and business partners