Senior Information Security Analyst - CSIRT

Define, develop, and/or implement technology controls and information security policies, programs, and tools Provide specialized expertise and guidance on assessing risks, identifying gaps, and developing security solutions to mitigate risks and protect the Bank Participate in projects of moderate to high complexity Serve as a key resource and subject matter expert in at least one technology niche/field and/or line of business Provide complex reporting, analysis, and assessments at the functional, business line, or enterprise level Support the Bank's Customer Service Strategy Provide high-level customer service to internal partners, vendors, and customers Contribute to improvements in the partner/customer experience Participate fully as a team member and contribute to a positive work environment May provide leadership, training, and guidance to other team members Communicate project and issue status with the team Share information and knowledge and learn from others Requirements Bachelor's degree preferred Information security certification / accreditation an asset 5-7 years of relevant experience Advanced knowledge of one or more technology controls / security domains, disciplines and practices Proficient to advanced knowledge of organization, technology controls / security / risk issues In-depth understanding of security controls/mechanisms and threat/risk assessment techniques for complex data, application and networking environments Expert knowledge of security incident and event management, log analysis, network traffic analysis, malware investigation and remediation, SIEM correlation logic and alert generation Ability to perform analysis and reporting using data mining techniques and present results to technical and executive stakeholders Understanding of NIST Cybersecurity Framework, SANS Top 20 Critical Security Controls, OWASP Top 10, and MITRE ATT&CK Basic programming skills, including scripting languages and PowerShell Expert knowledge of SIEM and UEBA solutions such as Splunk or Azure Sentinel, plus experience with CrowdStrike, MS Defender for Endpoint, and XSOAR Expert knowledge of enterprise IT operations, incident management, change management, access/identity management, security operations, vulnerability and compliance management, ticketing systems, incident ticket life cycle, and SLA terms Certifications listed: GIAC (GCIA, GPEN, GWAPT, GCIH, GSEC, GCFA), CCNP, CCNA,

CISSP

, cloud security Ability to perform sedentary work, multiple tasks, operate standard office equipment, concentrate for long periods, and read, write, comprehend instructions, and perform basic arithmetic Occasional domestic travel; no international travel Core Competencies Demonstrates advanced knowledge of information security controls, risk assessment techniques, and security incident management. Proficient in data analysis and reporting, with expertise in SIEM solutions and compliance frameworks. Highest-signal resume keywords Information Security Certification Advanced Knowledge of Security Controls Expert Knowledge of SIEM Solutions Risk Assessment Techniques Data Analysis and Reporting Hard Skills Security Incident Management Threat Assessment Techniques Data Mining Techniques Basic Programming Skills Log Analysis Network Traffic Analysis Malware Investigation Vulnerability Management Change Management Access/Identity Management Soft Skills Customer Service Team Collaboration Communication Certifications & Qualifications GIAC (GCIA, GPEN, GWAPT, GCIH, GSEC, GCFA) CCNP CCNA CISSP Cloud Security Industry Keywords NIST Cybersecurity Framework SANS Top 20 Critical Security Controls OWASP Top 10

MITRE ATT&CK

Security Operations Tools & Technologies Splunk Azure Sentinel CrowdStrike MS Defender for Endpoint

XSOAR

#J-18808-Ljbffr Jobtailor