Senior Information Security Analyst SecOps - dlapiper

DLA Piper is, at its core, bold, exceptional, collaborative and supportive. Our people are the backbone, heart and soul of our firm. Wherever you are in your professional journey, DLA Piper is a place you can engage in meaningful work and grow your career. Let’s see what we can achieve. Together.

Summary

The Senior Information Security Analyst is responsible for identifying, investigating, and addressing both internal and external threats. This position requires a deep understanding of various threats, attacks, and malware to develop effective detection and protection measures for the enterprise. The position will collaborate with the IT department to maintain security controls, which includes tuning detection systems, updating control policies, and automating processes. Additionally, this role involves directly managing relationships with our security operations vendors and providing technical leadership and mentorship to a team of security analysts. This position plays a critical role in driving initiatives for advanced threat detection, incident response, and vulnerability management, which are vital for maintaining a proactive and robust security posture. The ideal candidate will combine extensive technical expertise in Security Operations (SecOps) with proven leadership skills, enabling them to enhance our security strategy and effectively respond to the evolving threat landscape.

Location

This position can sit in our Washington DC, Atlanta, Austin, Baltimore, Chicago, or Northern Virginia office and offers a hybrid work schedule.

Responsibilities

• Mentoring and guiding Information Security Analysts.
• Responsible for evaluating the effectiveness of and improving various information security program functions at the Firm.
• Reviewing Security Incident and Event Management (SIEM) systems, which includes regularly reporting of metrics and summaries regarding ongoing investigations and ticket tracking,
• Performing alert triage, which involves investigating and analyzing security incidents, identifying root causes, and developing appropriate mitigation strategies.
• Ensuring effective Endpoint Threat Detection, including EDR capabilities, traditional antivirus, asset management, and familiarity with baseline and configuration management tools.
• Managing Next Generation Firewalls and/or Intrusion Detection/Prevention Systems (IDS/IPS).
• Engaging in Threat Hunting and utilizing Threat Intelligence.
• Utilizing malware sandbox technologies and interpreting the results.
• Overseeing Incident Response tools, processes, and capabilities.
• Possessing experience or a deep understanding of vulnerability and configuration management.
• Conducting independent project work.