Information Security Analyst

MassMutual; United States; Hybrid; USD 140,000 - 190,000; Full time

Job summary

MassMutual is seeking a Mastery Level SOC Analyst to join a growing cybersecurity team. You will perform malware analysis, develop and deploy SOAR automations, and collaborate with data science to enhance Agentic capabilities and threat detection across the organization.

This role requires extensive SOC experience, strong leadership and communication skills, and the ability to work with cross-functional security teams including threat intel, engineering, and IAM to protect MassMutual’s assets

Qualifications

• 8+ years in a Security Operations Center or similar cyber security role.
• 1+ year experience with Artificial Intelligence models to enhance SOC capabilities.
• 2+ years experience writing in Python.
• 2+ years experience working with SOAR platforms.

Responsibilities

• Perform advanced Malware analysis and extract Indicators of Compromise (IOCs).
• Develop and deploy SOAR automations.
• Collaborate with Data Science to build Agentic capabilities.
• Work with Security Intelligence to enhance prevention, detection and threat hunting.
• Lead and mentor junior analysts and provide escalation support.
• Perform QA and documentation of analyses.

Skills

Python

Leadership

Communication skills

Analytical thinking

Education

Bachelor’s degree in cyber security

CISSP/CISM/CISA

GIAC certifications

Tools

SOAR platforms

SIEM platforms

MITRE ATT&CK

AWS

Azure

PowerShell

Job description

The Opportunity

As a Mastery Level Security Operations Center (SOC) analyst you’ll have an opportunity to be part of a growing team of highly technical Cybersecurity analysts who are passionate about protecting MassMutual’s assets and customers by leveraging Agentic capabilities, problem solving skills and innovative technology solutions. In this role, as well as all roles within MassMutual, you will demonstrate accountability, agility, a dedication to be inclusive, a strong business acumen, and will show courage, even in the most difficult situations. We also highly value strong communication skills, a passion for learning, leadership traits, resilience, and self-awareness.

The Team

As a member of the SOC team, you will work in close collaboration with fellow security analysts, engineers, and other IT security specialists throughout the firm including the Security Operations Center, Threat Intelligence, Offensive Security, Security Platforms Support, Network Security, Endpoint Security and IAM teams

The Impact:

• Perform advanced Malware analysis and extract Indicators of Compromise (IOCs) to feed our Threat Intelligence Platform


• Develop and deploy SOAR automations accelerating internal SOC processes.


• Work closely with our Data Science Team to build Agentic capabilities


• Work collaboratively with our Security Intelligence team to enrich and enhance prevention, detection, and threat hunting capabilities


• Optimize alerting platforms through rule development and tuning of existing alerting logic


• Act as team lead, mentor Junior Analysts, be a go to escalation point for other SOC analysts


• Perform QA responsibilities ensuring thorough analysis and documentation

The Minimum Qualifications

• 8 + years’ experience working in a Security Operation Center or similar cyber security technical role.


• 1 + year’s experience working with Artificial Intelligence models to enhance SOC capabilities.


• 2 + years experience writing in Python.


• 2 + years experience working with SOAR platforms


• Able to support off hours escalations

The Ideal Qualifications

• Bachelor’s degree in cyber security


• Certifications: CISSP, CISM, CISA, GCIH, GCFR


• Relevant Cyber Security GIAC Certification such as CISM, CEH, GCIH, GCDA or similar


• Knowledge of and practical experience with the MITRE ATT&CK framework


• Mastery of Python, PowerShell or other scripting languages


• Experience working with a SIEM platform mining large datasets


• Understanding of web application vulnerabilities including XSS, CSRF, SQL Injection, command injection and serialization attacks


• Interest in continuous learning and a passion for Cybersecurity


• Experience and confidence communicating with and presenting to senior leadership


• Strong analytical and problem-solving skills


• Advanced technical expertise developing security automations


• In depth knowledge of operating systems process relationships and file structures (Windows, Mac, Linux).


• Functional experience developing new detections for alerting platforms


• Expert level knowledge of Cybersecurity attack and defense techniques


• Strong understanding of web authentication flows such as SAML and OAUTH


• In depth knowledge of cloud environments such as AWS and Azure.


• Deep understanding of TCP/IP, DNS, HTTP/S, and packet-level analysis.


• Understanding of living off the land techniques used by adversaries, using tools such as PowerShell, WMIC, Task Scheduler, Windows Registry etc.

What You Can Expect at MassMutual

MassMutual offers the opportunity to do meaningful work within a purpose-driven organization that values long-term impact over short-term outcomes. In this role, you can expect:

• Clear areas of ownership and accountability, with work that connects directly to company and customer outcomes


• A collaborative environment where perspectives are welcomed


• Access to learning, development, and internal networks that support continuous growth and skill-building over time


• Employee-led communities and forums that foster connection, learning, and inclusion across the organization


• A culture grounded in integrity, responsibility, and stewardship—supported by a company with a strong legacy and a future-focused mindset

#LI-RK1

#LI-Remote

MassMutual is an equal employment opportunity employer. We welcome all persons to apply.

If you need an accommodation to complete the application process, please contact us and share the specifics of the assistance you need.

California residents: For detailed information about your rights under the California Consumer Privacy Act (CCPA), please visit our California Consumer Privacy Act Disclosures page.