Security Incident Response Analyst

firstPRO US; Boston (MA); Hybrid; USD 90,000 - 130,000; Full time

Job summary

firstPRO US is seeking a Security Incident Response Analyst in Boston, MA. This contract-to-hire position is hybrid and focuses on coordinating responses to complex security threats, strengthening the incident management framework, and communicating with stakeholders at all levels.

The role involves data analysis, remediation actions, and driving security process improvements across the organization, with emphasis on network, endpoint, and application protection through SIEM and related tooling.

Qualifications

• Experience in security incident response and SOC operations.

Responsibilities

• Analyze data and recommend remediation actions or security enhancements, communicating findings to both technical and non-technical audiences.
• Research adversarial TTPs and develop detection and prevention techniques across environments including network, endpoint, and applications via SIEM.
• Monitor events from firewalls, SIEMs, IDS, and networking gear; identify root causes using a structured approach.
• Collaborate with senior engineers and management to define and drive security process improvements.
• Create and maintain security documentation like architecture diagrams, procedures, and security standards.

Job description

Our client is seeking an Security Incident Response Analyst in Boston, MA. This is a contract to hire role and hybrid.

The role plans the response to complex security threats and enhances the incident management framework. This role drives initiatives that bolster the banks cybersecurity defenses and fosters a culture of continuous improvement and resilience, refines IR processes, and communicates with stakeholders at all levels.

MAJOR RESPONSIBILITIES :

• Analyze data, make recommendations for remedial action and/or security network enhancements based on detailed analysis and ensure proper communication of issues and/or recommendations to both technical and non-technical audiences. This includes remediation efforts for day to day reported trouble tickets from internal customers.
• Research adversarial Tactics, Techniques and Procedures (TTPs) and developing novel detection and prevention techniques across multiple environments including network, endpoint and applications, particularly through use of the bank SIEM solution.
• Monitor events and alerts generated by firewalls, SIEMs, IDS and networking equipment Methodically identify system security issues and determine root cause via a consistent, consistent logical approach.
• Work with senior engineers and technology management, define and drive security-based process improvements.
• Create and/or maintain security documentation including security architecture diagrams, procedures, and Bank security standards