Senior Information Security Analyst (REMOTE)

The Hanover Insurance Group is an insurance company committed to delivering on its promises and supporting customers through inclusive and sustainable practices. The Senior Information Security Analyst serves as a first responder to security events, analyzes threats, supports incident response, advises on security technologies, and collaborates across the enterprise to resolve issues and strengthen security posture.

Responsibilities:

• Monitor IDS alerts, network and system logs, plus network traffic to detect and report threats
• Open Incident tickets for tracking of security events and document resolution
• Monitor trend analysis and document findings
• Performs work across multiple platforms with an intermediate depth of knowledge in each platform
• Advise on Threats and Vulnerabilities aiding in prioritization of activities
• Research security threats and develop IOC (Indicators of Compromise) for detecting potential anomalies and patterns with infected systems
• Perform incident response to include security event analysis, incident handling, reporting, and threat analysis
• Provide technical analysis, design, support and make recommendations for various security applications, technologies, and products to Sr Team Members and Leadership
• Provide situation reports for DFiR (Digital Forensics, Incident Response) or escalations to leadership
• Training and mentoring of other analysts
• Performs work across multiple platforms with a depth of knowledge in at least 2 of those platforms. This role will act as the escalation path for more junior staff, to validate findings and identify scope of events and support during larger investigations
• May lead other team members on projects or initiatives. Assign task as appropriate
• Coordinating team collaboration across the IT organization

Requirements:

• Bachelor's degree in computer science or related field or equivalent knowledge with 5+ year of related professional experience
• Technical expertise in systems administration and security tools, combined with knowledge of security practices and procedures
• Intermediate networking knowledge to include multiple protocols
• Excellent independent and team collaboration skills
• Experience working in complex environments with a high degree of organizational effectiveness
• Have the Ability and commitment to communicate effectively, consistently chooses communication methods to ensure critical information reaches and persuades intended audience
• Be a strong team player. Uses strong interpersonal skills to build partnerships with stakeholders and peers
• Have excellent analytical, decision-making and problem-solving skills
• Openness to Learning - Expands knowledge base through traditional and non-traditional education to improve personal skills and abilities
• Requiring some combination of the following certifications:
• OS Level Certifications
• Security+
• GSEC
• SSCP
• CEH