Senior Cyber Threat Analyst

Ascensus; Philadelphia (Philadelphia County); Remote; USD 120,000 - 160,000; Full time

Job summary

Ascensus is seeking an experienced Cyber Threat Analyst to join the Security team in the United States. You will monitor SIEM/EDR and cloud security, develop 24/7 SOC SOPs, and lead threat intelligence initiatives while coordinating with IT, Risk, and Legal.

The role requires mentoring junior analysts and strong communication with auditors and stakeholders. You will work in a fast-paced environment with the CISO reporting line and opportunities to advance in incident response, threat hunting,

Qualifications

• Minimum 5 years of experience in Information Security.
• Strong understanding of the cyber threat landscape.
• Knowledge across cybersecurity concepts, network protocols, firewalls, IDS/IPS, email and endpoint security, and cloud security.
• Mentor junior cyber threat analysts.
• Excellent written and oral communication skills.
• Familiarity with NIST CSF, PCI-DSS, CIS CSCs, MITRE ATT&CK, Cyber Kill Chain.
• Ability to communicate effectively with auditors and stakeholders.
• Remote work readiness with a reliable home workspace (if applicable).

Responsibilities

• Monitor cybersecurity solutions including SIEM, EDR, Vulnerability Management, and cloud security for suspicious activities.
• Develop and maintain 24/7 SOC Tier 1 and Tier 2 SOPs and playbooks.
• Manage and monitor threat detection tools, malware analysis, email analysis, and other security analytics.
• Maintain key threat intelligence KPIs and reporting capabilities.
• Follow digital forensic program and process as directed.
• Execute IT incident response plan as directed.
• Assist in penetration testing and yearly security assessments.
• Supervision N/A

Skills

SIEM operations

Threat hunting

Malware analysis

Incident response

Network security

Cloud security fundamentals

Cyber threat intelligence

MITRE ATT&CK

Communication skills

Documentation & reporting

Tools

EDR

SAST/DAST tooling

Threat intelligence platforms

Forensic tools

Sandbox analysis tools

Job description

Position Summary

Ascensus is the leading independent technology and service platform powering savings plans across America, providing products and expertise that help nearly 16 million people save for a better today and tomorrow. The Cyber Threat Detection and Response team is responsible for shaping and maintaining a Cyber Threat Intelligence program that aligns with leading industry standards, advice, and direction. This involves operating and continually improving existing Cyber Threat Intelligence processes, as well as the development of new processes in response to evolving threats and business requirements. This role will work in close partnership with Security Engineering team, IT Architect(s), Risk and Legal. This position will report directly to the Ascensus Chief Information Security Officer.

Job Functions, Essential Duties and Responsibilities

• Monitoring of all cybersecurity solutions including but not limited SIEM, EDR, Vulnerability Management, Network, FW / IPS, DLP, cloud for suspicious activities.
• Develop and maintain 24/7 SOC Tier 1 and Tier 2 cybersecurity SOP and playbooks.
• Manage and Monitor threat detection and response tools including but not limited to malware analysis, email analysis, application analysis (SAST/DAST monitoring), network analysis, domain intelligence, threat IOC and feeds, forensic analysis, and sandbox tools.
• Manage and maintain key threat intelligence KPIs and reporting capabilities.
• Follow digital forensic program and process as directed.
• Execute IT incident response plan as directed.
• Assist in the performance of penetration testing and yearly managed service assessment.
• SupervisionN/A

Experience, Skills, Knowledge Requirements

Minimum 5 years of experience in Information Security.

Great understanding of the cyber threat landscape.

Demonstrable intermediate knowledge of all the following areas: cybersecurity concepts, network protocols, firewalls, IDS/IPS systems, email security, endpoint security, network security, Windows/Linux/macOS systems, cyber threat hunting, malware analysis tools and techniques, cyber threat intelligence, common threat actor TTPs, application security concepts, cloud security fundamentals, Incident Response methodologies.

Mentor junior cyber threat analysts.

Be highly inquisitive and never stop asking questions or looking for results.

Knowledge of relevant frameworks, standards, and best practices such as NIST CSF, PCI-DSS, CIS CSCs, MITRE ATT&CK, Cyber Kill Chain etc.

Excellent written and oral communication skills.

The ability to communicate effectively (clear, concise, and professionally) with all levels within Ascensus, auditors and business partners.

For virtual remote positions, we require an uninterrupted workspace during business hours and an internet work speed of 25 Mbps or better. If you are unsure of your internet speed before applying, please check with your service provider.

We are proud to be an Equal Opportunity Employer.