Senior Analyst, Cybersecurity Operations & Response

Fox Rothschild; Center Square (PA); On-site; USD 115,000 - 130,000; Full time

Job summary

Fox Rothschild LLP seeks a Senior Analyst in the Information Services Department to support Cybersecurity Operations & Response, incident response, and threat/vulnerability management to protect firm systems and data.

The role requires developing playbooks, monitoring security tools, on-call rotation, and reporting metrics while collaborating with internal teams and external providers to continually improve the security program. Center Square, PA office.

Qualifications

• Bachelor’s degree in information security or equivalent.
• Minimum of five years of information security experience including security operations, incident response, and threat/vulnerability management.
• Knowledge of information security principles and incident response processes.
• Familiarity with NIST and MITRE ATT&CK frameworks.
• Strong written and verbal communication skills.

Responsibilities

• Support day-to-day operation of the Cybersecurity Operations & Response program.
• Assist with threat and vulnerability management program administration.
• Develop and maintain security playbooks, policies, and procedures.
• Participate in cyber event response including investigation, containment, remediation, and recovery.
• Monitor security tools and perform incident triage.
• Produce reporting and metrics on security operations and program effectiveness.
• Collaborate with internal teams and third-party providers.
• Participate in on-call rotation outside business hours.

Skills

Information security experience

Incident response

Threat and vulnerability management

Analytical skills

Communication skills

Education

Bachelor’s degree in information security

Tools

NIST framework

MITRE ATTACK

Job description

As a member of the Information Services Department, the Senior Analyst, Cybersecurity Operations & Response supports the execution and continuous improvement of the Firm’s Cybersecurity Operations & Response program. This role is responsible for assisting with security operations, incident response activities, and threat and vulnerability management initiatives to help protect the Firm’s systems, applications, and data from cyber threats.

Essential Functions

• Support the day-to-day operation and execution of the Firm’s Cybersecurity Operations & Response program.
• Assist with the administration and continuous improvement of the Firm’s threat and vulnerability management program.
• Develop, maintain, and update associated playbooks, policies, standards, and procedural documentation.
• Participate in cyber event response activities, including investigation, containment, remediation, and recovery efforts.
• Serve as a primary resource for security operations monitoring and incident triage activities.
• Perform threat and vulnerability assessments and assist with remediation efforts to ensure systems are protected from known and potential threats.
• Monitor security tools and alerts to identify, analyze, and elevate potential security incidents.
• Develop and distribute reporting and metrics related to security operations, incidents, vulnerabilities, and overall program effectiveness.
• Collaborate with internal teams and third-party providers to support security initiatives and operational improvements.
• Participate in an on-call rotation and be available to respond to cybersecurity incidents and operational issues outside of normal business hours, as needed.

Additional Functions

• Additional duties as assigned.

Education

Qualifications (Experience, Knowledge, Skills and Abilities):

• Bachelor’s degree in information security or an equivalent combination of work and education required.

Experience

• Minimum of five years of information security experience required including some direct experience with security operations, incident response, and threat/vulnerability management.

Knowledge, Skills, & Abilities

• Knowledge of information security principles, including security operations, incident response, and threat and vulnerability management.
• Knowledge of NIST and MITRE ATT&CK frameworks.
• Experience in developing, documenting, and maintaining security procedures including security response playbooks.
• Experience in developing, managing, and executing a threat and vulnerability management program.
• Strong analytical and problem-solving skills to enable effective security event and problem resolution.
• Ability to work well under minimal supervision.
• Strong written and verbal communication skills.
• Strong customer/client focus, with the ability to manage expectations appropriately, provide a superior customer/client experience, and build long-term relationships.

Work Environment & Physical Demands

This job operates in a clerical, office setting. This role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines.

Physical Requirements

Sedentary work: Exertion of physical strength to lift, carry, push, pull, or otherwise move objects up to 10 pounds. Work involves sitting most of the time. Walking and standing is often necessary in carrying out job duties.

Compensation & Benefits

The salary ranges for this position apply to the respective listed locations. The salary range reflects a variety of factors that are considered in making compensation decisions, including but not limited to experience, education, licensure and/or certifications, geographic location, market demands and other business and organizational needs. It is not typical for an individual to be hired at or near the top of the range for a position. Reasonable estimates of the current ranges for this position are:

• Las Vegas: $100,000 - $115,000
• Atlantic City, Chicago, Minneapolis: $110,000 - $125,000
• Boston, Denver, Los Angeles, Morristown, Princeton, Seattle, Washington, D.C.: $115,000 - $130,000
• New York & San Francisco: $140,000 - $155,000

For information on Fox Rothschild's compensation and benefits visit: Compensation & Benefits (foxrothschild.com)

DISCLAIMER

Fox Rothschild LLP is under no obligation to provide sponsorship for this position. Applicants must be currently authorized to work in the United States on a full-time basis now and in the future.

The above is intended to describe the general content of and requirements for the performance of this job. It is not a contract or employment agreement and is not to be construed as an exhaustive statement of all functions, responsibilities, or requirements the employee may be required to perform, and the employee may be required to perform additional duties. Additionally, management reserves the right to review and revise the job description at any time. Employment with the firm is at-will. Employees must be able to satisfactorily perform all the essential functions of the position with or without reasonable accommodation. If an accommodation request would cause an undue hardship or a safety concern, the individual may not be eligible for the position.

Fox Rothschild LLP is an equal opportunity employer. We consider all qualified applicants without regard to race, religion, color, sex, national origin, age, sexual orientation, gender identity or gender expression, breastfeeding, lactation, disability, or veteran status, or any other characteristic protected in accordance with applicable federal, state, and local jurisdictions. Applicants who need any assistance applying for a position are encouraged to contact the Human Resources Department, [e-mail].