remote
Senior Associate Cyber Security Operations Center Analyst - State Street
Systems Engineer
Lead security monitoring and incident response in a global SOC, leveraging SIEM, threat intelligence, and incident response frameworks to protect enterprise assets and support digital transformation initiatives.
About the role
Key Responsibilities
- Operate and maintain the SOC environment, monitoring alerts from SIEM and other security tools to detect and respond to threats in real time.
- Lead incident investigations, perform root‑cause analysis, and coordinate remediation activities across cross‑functional teams.
- Develop and refine playbooks, runbooks, and automated response scripts to improve detection coverage and response efficiency.
- Collaborate with threat intelligence teams to contextualize alerts, share indicators of compromise, and enhance overall security posture.
- Provide mentorship and guidance to junior analysts, fostering a culture of continuous learning and improvement.
Requirements
- 5+ years of experience in a SOC or security operations role, with a strong background in incident response and threat hunting.
- Proficiency with SIEM platforms (e.g., Splunk, QRadar) and security orchestration tools.
- Solid understanding of network protocols, operating system internals, and common attack vectors.
- Excellent analytical, communication, and problem‑solving skills.
- Relevant certifications such as CISSP, GCIH, or CEH are a plus.