Cyber Security Analyst

Sotalent; Town of Springfield (WI); On-site; USD 120,000 - 190,000; Full time

Job summary

Sotalent in Springfield, MA, is seeking a senior level security professional to join its Security Operations Center. This advanced technical role targets mastery in malware analysis, threat intelligence, and developing automated defenses.

You will lead as the primary technical point of contact, craft SOAR automations, collaborate with data science teams to build AI capabilities for the SOC, and mentor junior analysts while communicating risk to senior leadership.

Qualifications

• Eight or more years of experience in a technical security operations role.
• At least one year of experience using AI models to improve security functions.
• Two or more years of professional experience programming in Python.
• Two or more years of experience with SOAR platform automation.
• Availability to support emergency escalations outside of standard business hours.

Responsibilities

• Serve as a senior escalation point and mentor for junior analysts
• Perform advanced malware analysis and threat hunting
• Design and deploy automated workflows within SOAR platforms
• Develop new detection logic and tune existing alerting rules
• Partner with security intelligence and offensive teams to improve prevention
• Ensure quality control and thorough documentation of security incidents
• Communicate complex technical risks to senior leadership

Skills

Security operations

Malware analysis

AI in security

Python programming

SOAR automation

Incident response

On-call readiness

Education

Cybersecurity degree

CISSP

CISM

GIAC certifications

Tools

Python

PowerShell

SOAR platforms

AWS

Azure

MITRE ATT&CK

Job description

A prominent financial services firm is seeking a senior level security professional to join their growing operations center in Springfield Massachusetts. This is an advanced technical role designed for a mastery level analyst who enjoys solving complex problems and implementing innovative defensive solutions.

The successful candidate will act as a primary technical lead within the Security Operations Center. You will be responsible for performing deep malware analysis and extracting indicators of compromise to strengthen the firm's threat intelligence. A major component of this role involves developing SOAR automations and collaborating with data science teams to build agentic AI capabilities for the SOC.

Key Responsibilities

• Serve as a senior escalation point and mentor for junior analysts
• Perform advanced malware analysis and threat hunting
• Design and deploy automated workflows within SOAR platforms
• Develop new detection logic and tune existing alerting rules
• Partner with security intelligence and offensive teams to improve prevention
• Ensure quality control and thorough documentation of security incidents
• Communicate complex technical risks to senior leadership

Basic Qualifications

• Eight or more years of experience in a technical security operations role
• At least one year of experience utilizing AI models to improve security functions
• Two or more years of professional experience programming in Python
• Two or more years of experience with SOAR platform automation
• Availability to support emergency escalations outside of standard business hours

Preferred Skills and Experience

• Degree in Cybersecurity or a related technical field
• Industry certifications such as CISSP CISM GCIH GCFR or similar GIAC credentials
• Deep expertise in the MITRE ATT AND CK framework
• Advanced scripting skills in Python and PowerShell
• Strong understanding of web application vulnerabilities and authentication flows like SAML and OAUTH
• In depth knowledge of cloud environments including AWS and Azure
• Expertise in operating system internals for Windows Mac and Linux
• Proficiency in packet level analysis and network protocols

This organization provides a mission driven environment that emphasizes long term impact and professional development. You will work within a collaborative culture that offers clear ownership of tasks and direct connection to business outcomes. The company is committed to inclusion and offers extensive internal networks for continuous learning and career growth.

This is an excellent opportunity for a seasoned analyst who wants to work at the intersection of traditional security operations and cutting edge automation and AI technologies.