Title:  Cyber Threat Analyst

Summary:

The Cyber Threat Analyst will focus on gathering and analyzing data from disparate systems and produce cyber insights as necessary to identify, contain, mitigate, and/or recover from cyber security threats and/or incidents. The Cyber Threat Analyst II will work side-by-side with peers to investigate all cyber threats facing the organization.

Responsibilities:

• Build, manage, and maintain correlation rules and alarming configurations for various cyber security platforms to include, but not limited to Security Incident & Event Management (SIEM), Security Orchestration, Threat Intelligence, and other platforms
• Understand common Windows/Linux/Mac operating system functions and vulnerabilities
• Collect, organize, and analyze data using various cyber security tools such as Common SIEM/event correlation technologies, Radware, firewall platforms, Threat Intel Platforms, and other security analysis platforms
• Support investigations of suspected cyber security events, system anomalies/misconfigurations, system misuse, compliance reviews as requested
• Identify, analyze, and interpret trends or patterns in complex data sets
• Exercise an understanding of the Cyber Kill Chain and Mitre ATT&CK Framework
• Work with the functional business area to identify, gather, investigate, and document business processes related to incident response, security logging sources and formats, company-wide data architectures, threat modeling, and security best practices
• Visualize data insights using data visualization tools as necessary to ensure CISO, Security Operations, and other relevant dashboards are current and relevant

Additional Job Responsibilities

• Perform root-cause analysis to understand data problems and find solutions by understanding user requirements
• Build an inventory of assets to be monitored in support the DFS Enterprise Security Monitoring program
• Serve as a trusted advisor to the Director, Security Technologies and/or the SVP-CISO on sensitive matters warranting confidentiality
• Demonstrate subject matter expertise across technology domains
• Perform other duties as assigned
• Consolidate and analyze data from disparate systems using data integration tools or writing custom code in SQL, Python, or other scripting languages

Qualifications:

• Bachelor degree with 3+ years of relevant work experience OR demonstrated ability to meet the job requirements through a comparable number of years of applicable work experience and education
• Strong analytical competency
• Ability to develop, customize, and maintain visualization dashboards utilizing SIEM and other security platforms
• Strong understanding of cyber security threat modeling
• Deep insights into threat intelligence tools and techniques
• Advanced knowledge of cyber-attack techniques, and mitigation strategies
• Advanced knowledge of firewalls, anti-malware, intrusion detection and/or prevention systems, and other network and systems security platforms
• Ability to effectively communicate complex topics to engineers and leadership
• Ability to properly handle confidential data and strictly follow business process and procedure
• Ability to collaborate in cross-functional teams
• Excellent attention to detail
• Ability to operate in high stress situations