Senior Cyber Incident & Vulnerability Analyst (Hybrid)

Janus Henderson Investors U.S.; Denver (CO); Hybrid; USD 110,000 - 120,000; Full time

Benefits offered by this job

Hybrid work

Health benefits

Volunteer time

Tuition reimbursement

Annual bonus

Job summary

Janus Henderson Investors in Denver is seeking an information security professional to lead incident response and vulnerability management within a hybrid security operations environment. You will triage alerts, assess severity, and coordinate remediation across applications, infrastructure, and cloud.

The role focuses on proactive threat analysis, policy monitoring, and actionable reporting; requires strong communication, collaboration with IT teams, and experience with ITSM tools like

Qualifications

• 2+ years in an Information Security role with security operations or threat analysis.
• Hands-on experience with SIEM and EDR platforms.
• Analytical mindset with knowledge of TTPs, malware behaviour, and incident handling.
• Familiarity with IAM concepts and monitoring—able to review user permissions, detect abuse, and flag suspicious behaviour.
• Experience performing alert triage and incident escalation within defined SLAs, using ITSM tooling such as ServiceNow and documentation platforms such as Confluence.
• Strong collaboration skills working with application and infrastructure teams within a security context.
• In-depth working knowledge of security best practices and frameworks (e.g., MITRE ATT&CK, OWASP Top 10, NIST).
• Excellent written and verbal communication skills, with the ability to produce clear work notes, handover reports, and stakeholder updates.
• Ability to manage multiple projects and tasks.
• Exposure to public cloud infrastructure (SaaS, IaaS, and PaaS).

Responsibilities

• Perform alert triage of security alerts to validate and prioritise incidents.
• Determine severity, impact, and root cause of incidents using MSSP and internal tools.
• Conduct initial triage and assessment of incidents to determine severity and impact.
• Monitor and respond to security alerts and events generated by security tools and technologies, including SIEM, IDS/IPS, firewalls, email, and EDR systems, in a timely manner meeting SLAs.
• Perform routine reviews of IAM to identify and address abuse of permissions by authorised users.
• Monitor for policy violations and report suspicious user behaviour.
• Assist in isolating affected systems to contain threats under supervision.
• Work notes and artefact logging in ITSM (ServiceNow / Confluence) incident tickets.
• Facilitate handovers to other SOC team members at the end of a shift, ensuring a smooth transition of ongoing incidents.
• Provide clear and timely updates to other SOC members and escalation points.
• Seek guidance from and accelerate where necessary to Mid-level Tier 2 analysts.
• Support daily security operations, by conducting regular vulnerability scans, analyze resulting reports and triage identified issues to ensure timely risk mitigation.
• Lead the end‑to‑end process of identifying, assessing, and coordinating the remediation of vulnerabilities across applications, infrastructure, and cloud environments, working closely with development and operations teams to implement effective and sustainable security controls.
• Optimize vulnerability scanning profiles, dashboards, and reports to ensure comprehensive coverage and actionable insights, while analyzing data to prioritize risks and provide clear remediation guidance.
• Contribute to the continuous improvement of vulnerability management processes, policies, and procedures, including supporting incident response activities and aligning with industry best practices.

Skills

SIEM

EDR

IAM

SLAs

Threat Analysis

Incident Handling

Communication

Cloud (SaaS/IaaS/PaaS)

Collaboration

MITRE ATT&CK

Job description

Janus Henderson Investors in Denver is seeking an information security professional to lead incident response and vulnerability management within a hybrid security operations environment. You will triage alerts, assess severity, and coordinate remediation across applications, infrastructure, and cloud.

The role focuses on proactive threat analysis, policy monitoring, and actionable reporting; requires strong communication, collaboration with IT teams, and experience with ITSM tools like