Sr Info Security Threat Hunting

Sr Info Sec Threat Hunting Specialist The Information Security Threat Hunting Specialist determines and reports threats or hidden events within the enterprise network. Under limited supervision, this role uses defensive measures and information collected from a variety of sources to protect the company's data, information systems, and networks. It also works to improve existing protection systems by continuously monitoring both the internal control environment and the external threat environment, identifying potential data leaks, and determining if an incident constitutes a violation of policies and standards. Key Responsibilities And Duties Determines potential threats, anomalous or malicious activities to network resources by examining and analyzing network traffic. Reviews and conducts cost/benefit evaluation of cloud solutions compared to virtual private networks, dedicated hosting, and in-house solutions. Determines the technical feasibility of adopting external cloud-based IT platform and infrastructure services within the organization. Leads the identification of portions of the organization's IT platform/infrastructure with the highest potential return for cloud deployment. Implements the organization's global strategies and initiatives to enhance Information Technology plans, operations and procedures. Verifies Intrusion Detection System (IDS) alerts as they occur. Researches and analyzes various source data sets and identified malicious activities to analyze the root cause and network weaknesses. Discovers current weaknesses and exploitation methods, along with the residual effects on IT systems and information through root‑cause analysis. Reviews reports and documents regarding security incidents details and outcomes. Participates in troubleshooting problems and recommending vulnerability conditions. Partners with security architecture, network engineering and desktop delivery on implementing and improving security controls. Monitors internal and external threat environments on a continual basis to best protect the organization's assets. Qualifications Education: University (Degree) Preferred Work Experience: 3+ Years Required; 5+ Years Preferred Physical Requirements: Sedentary Work Key Skills: SOAR type application creation and automation, Advanced SIEM query creation skills, securing AI and AI monitoring Related Skills: Accountability, Adaptability, Business Continuity Planning, Cloud Computing Security, Collaboration, Communication, Compliance, Consultative Communication, Cybersecurity, Detail‑Oriented, General Risk Management, Network Security, Prioritizes Effectively Base Pay Range: $92,400/yr – $112,000/yr Equal Opportunity We are an Equal Opportunity Employer. TIAA does not discriminate against any candidate or employee on the basis of age, race, color, national origin, sex, religion, veteran status, disability, sexual orientation, gender identity, or any other legally protected status. Accessibility Support Phone: View phone number on click.appcast.io Email: View email address on click.appcast.io Drug and Smoking Policy TIAA maintains a drug‑free and smoke‑free workplace. #J-18808-Ljbffr TIAA