Information Security Analyst 3 - SOC Analyst

Information Security Analyst 3 - SOC AnalystThe Information Security Analyst 3 is responsible for supporting enterprise information security initiatives through risk analysis, security monitoring, incident response, compliance activities, security assessments, Identity and Access Management (IAM), and stakeholder consultation. This role serves as a key contributor in identifying, assessing, and mitigating cybersecurity risks while ensuring alignment with Enterprise Information Security policies, standards, and regulatory requirements.The ideal candidate will possess a strong background in security operations, incident response, threat detection, security analytics, cloud security technologies, and identity security. This individual will partner with technology teams, security operations personnel, risk management partners, and business stakeholders to improve the organization's security posture, proactively address cyber threats, and support enterprise security governance initiatives.Key ResponsibilitiesInformation Security Risk ManagementProvide information security consultation to improve awareness and compliance with Enterprise Information Security policies, standards, and procedures.Perform remediation activities related to security assessments, audits, risk reviews, and control testing findings.Provide guidance and recommendations regarding mitigating controls and information security risk reduction strategies.Evaluate information security risk exposure through advanced data aggregation, analysis, and reporting.Review and interpret security policies, standards, and procedures while recommending improvements and enhancements.Support information asset portfolio reconciliation and certification activities.Review proposed control standards for business impact and provide recommendations for modifications and clarifications.Support enterprise risk, compliance, governance, audit, and security control programs.Security Operations & Incident ResponseParticipate in security monitoring, investigation, containment, escalation, and remediation activities.Support incident response processes utilizing established procedures, tools, and technologies.Perform threat hunting and investigative activities utilizing endpoint, network, identity, and cloud security telemetry.Analyze security events and alerts generated by security monitoring platforms.Support cyber threat detection and response efforts through security analytics and log analysis.Leverage offensive security concepts and adversarial thinking techniques to identify indicators of compromise, threat actor behaviors, and emerging threats.Conduct vulnerability assessment reviews and support remediation planning activities.Security Monitoring & AnalyticsUtilize Security Information and Event Management (SIEM) platforms to identify, investigate, and respond to security events.Leverage Security Orchestration, Automation, and Response (SOAR) tools to improve security operations efficiency.Analyze host, endpoint, network, cloud, and identity-related logs to identify suspicious activity and potential security incidents.Develop reporting, dashboards, and metrics related to security risks, incidents, and operational performance.Conduct threat hunting activities utilizing security analytics, endpoint telemetry, and event data.Support cybersecurity reporting, security metrics development, operational dashboards, and risk exposure analysis.Identity & Access Management (IAM)Support enterprise Identity and Access Management (IAM) programs and security controls.Assist with Identity Governance processes, access reviews, certification activities, and entitlement validation.Support provisioning and deprovisioning controls and related compliance initiatives.Review and analyze identity security risks associated with access management processes.Support Privileged Access Management (PAM) initiatives and enterprise access control programs.Assist with implementation and validation of identity-related controls including authentication, authorization, and Attribute-Based Access Control (ABAC) frameworks.Security Controls & ComplianceConduct security control testing and validation activities.Assess effectiveness of security controls and identify opportunities for improvement.Support compliance initiatives and regulatory requirements within the enterprise environment.Partner with risk, compliance, audit, and technology teams to ensure effective governance and control coverage.Assist with development and delivery of Information Security Awareness and Education programs.Support vulnerability management processes, remediation efforts, and enterprise security governance initiatives.Participate in security assessments and control reviews to improve overall risk posture.Cloud & Endpoint SecuritySupport security monitoring and investigative efforts across:Microsoft AzureOffice 365Google Cloud Platform (GCP)Cloud-based environmentsMonitor and analyze security events generated from Endpoint Detection and Response (EDR) platforms.Support implementation and maintenance of security controls protecting cloud and endpoint technologies.Evaluate cloud security risks and recommend appropriate mitigation strategies.Assist with monitoring cloud security posture and compliance requirements across multi-cloud environments.Security Engineering & AutomationSupport security tool integrations and automation initiatives that improve detection and response capabilities.Partner with security engineering teams to enhance monitoring, workflow automation, and operational effectiveness.Support SOAR implementation efforts and security automation activities.Contribute to DevSecOps and security operations modernization initiatives.Assist with security analytics and advanced detection engineering efforts.Collaboration & LeadershipCollaborate with peers, technology teams, security engineers, compliance partners, and business stakeholders.Provide consultation and security guidance to internal customers.Support cross-functional security initiatives and projects.Mentor junior analysts and provide knowledge sharing across the team.Participate in continuous improvement efforts to strengthen security operations and risk management programs.Serve as a trusted advisor on information security risks, controls, and incident response activities.Required Qualifications4+ years of Information Security Analysis experience or equivalent demonstrated through work experience, military experience, education, or training.2+ years of Information Security Engineering experience.1+ year of Incident Response experience utilizing security monitoring tools and response methodologies.1+ year of experience with:Security Information and Event Management (SIEM) platformsSecurity Orchestration, Automation, and Response (SOAR) solutions1+ year of experience supporting:Microsoft AzureOffice 365Cloud security technologiesExperience conducting security investigations and responding to security incidents.Knowledge of security analytics, incident response, and digital forensics disciplines.Experience developing security reports, dashboards, and risk analysis deliverables.Strong analytical, troubleshooting, and problem-solving skills.Excellent verbal and written communication skills.Preferred Qualifications2+ years of experience supporting Endpoint Detection and Response (EDR) solutions.Experience with:Threat HuntingSecurity OperationsIncident ResponseDigital ForensicsSecurity AnalyticsExperience supporting Identity and Access Management (IAM), Identity Governance, Access Reviews, Provisioning and Deprovisioning, Privileged Access Management (PAM), and enterprise access control programs.Experience developing cybersecurity metrics, dashboards, reporting, and operational security analytics.Knowledge of offensive security concepts including penetration testing methodologies, adversary tactics, exploitation techniques, and vulnerability research.Experience performing host and network log analysis in support of threat investigations and incident response activities.Experience supporting vulnerability management, remediation planning, security assessments, and enterprise security governance initiatives.Experience securing and monitoring cloud environments including Microsoft Azure and Google Cloud Platform (GCP).Experience supporting security automation, security tool integrations, SOAR initiatives, and DevSecOps-driven security operations.Experience working in banking, financial services, or other highly regulated environments