Senior Cybersecurity Analyst

Travelport LP; Atlanta (GA); Remote; USD 126,000 - 154,000; Full time

Benefits offered by this job

Remote work

Pension

Private medical

Life assurance

Personal travel insurance

25 days annual leave

Job summary

Travelport LP is seeking a Senior Cybersecurity Analyst to join our Cybersecurity team. This role is remote within the United States and focuses on advanced investigations, threat hunting, digital forensics, insider threat analysis, and detection engineering to continuously improve security monitoring and response capabilities.

The successful candidate will mentor other analysts, lead investigations across network, endpoint, cloud, and SaaS environments, and contribute to rule engineering and

Qualifications

• 5+ years in cybersecurity, security operations, incident response, or related disciplines.
• Strong experience analyzing logs from network, firewall, endpoint, and authentication sources.
• Experience investigating complex incidents and reconstructing timelines.
• Experience with email security, DLP investigations, cloud or SaaS security, Insider Threat, and UEBA.
• Ability to mentor and guide other cybersecurity professionals.
• Familiarity with MITRE ATT&CK and defense-in-depth concepts.
• Bachelor's or equivalent in a related field.

Responsibilities

• Lead complex cybersecurity investigations across multiple environments.
• Analyze telemetry from network, firewall, endpoint, and identity systems to determine attack vectors and impact.
• Investigate email threats including phishing and BEC.
• Tune DLP policies and detection logic to reduce data loss risk.
• Perform proactive threat hunting and analyze threat intelligence.
• Conduct digital forensics to support incidents and investigations.
• Develop and tune detection rules and monitoring logic.
• Mentor other analysts and share techniques and lessons learned.

Skills

Cybersecurity

Security investigations

Threat hunting

Digital forensics

Incident response

UEBA

DLP

Cloud security

SIEM

EDR/XDR

Network security

Threat intelligence

MITRE ATT&CK

Mentoring

Scripting

Education

Bachelor's degree in Cybersecurity

Equivalent professional experience

Tools

SIEM

EDR/XDR

Firewalls

DLP

UEBA

Cloud security

Job description

SENIOR CYBERSECURITY ANALYST | REMOTE | US

Travel obsessed? Big tech fan? Hey, you're in good company. If you want to be part of the industry that makes the world go round, then look no further.

Travelport is the brains behind lots of your travel bookings- plane, car or hotel. Our technology is used to book that magical holiday, infamous long-awaited bucket list trip or that overdue school reunion. While we can't solve mosquito bites or lost luggage, we can simplify a lot of the technical parts of travel, and we're looking for the best thinkers to help us do it.

We're hiring right now for a Senior Cybersecurity Analyst!

How you'll make an impact:

We are seeking an experienced Senior Cybersecurity Analyst to join our Cybersecurity team. This position is responsible for advanced security investigations, threat hunting, digital forensics, insider threat analysis, detection engineering, and the continuous improvement of our security monitoring and response capabilities.

The Senior Cybersecurity Analyst will investigate complex security events across network, endpoint, email, cloud, identity, data security, and user behavior environments, correlating information from multiple sources to determine the scope, timeline, and impact of potential security incidents. As a senior member of the team, this individual will also serve as a technical mentor and escalation point for other analysts while contributing to the maintenance, tuning, and improvement of enterprise security technologies.

Your role in action:

• Lead complex cybersecurity investigations across network, endpoint, email, cloud, identity, data security, and user behavior environments.

• Analyze network, firewall, authentication, endpoint, and other security telemetry; correlate evidence from multiple sources and reconstruct incident timelines to determine attack vectors, scope, impact, and root cause.

• Investigate email-based threats including phishing, business email compromise, malicious attachments, and account compromise.

• Investigate DLP alerts and potential data loss events and tune policies, rules, thresholds, and detection logic to improve effectiveness.

• Conduct insider threat investigations using DLP, UEBA, endpoint, identity, and other telemetry; develop and tune behavioral rules, indicators, and risk thresholds.

• Investigate suspicious activity within cloud and SaaS environments.

• Conduct proactive threat hunting and gather and analyze threat intelligence related to emerging threats and attacker tactics, techniques, and procedures.

• Perform digital forensic analysis in support of cybersecurity incidents and investigations.

• Develop and tune security detections, correlation rules, alerts, policies, and monitoring logic.

• Assist with the configuration, maintenance, troubleshooting, and optimization of cybersecurity technologies and identify security control gaps.

• Document investigative findings, evidence, timelines, and remediation recommendations.

• Serve as a technical escalation point and actively mentor other analysts in investigations, incident response, threat hunting, log analysis, insider threat, and security technologies.

• Develop and share technical documentation, investigation techniques, and lessons learned to improve team capabilities.

Could this be you?

• 5+ years of relevant experience in cybersecurity, security operations, incident response, digital forensics, threat detection, insider threat, or related disciplines.

• Strong experience analyzing network, firewall, endpoint, authentication, and other security logs and correlating evidence across multiple data sources.

• Demonstrated experience investigating complex cybersecurity incidents and reconstructing incident timelines.

• Experience with email security, DLP investigations and tuning, cloud or SaaS security investigations, Insider Threat, and User and Entity Behavior Analytics (UEBA).

• Experience conducting threat hunting and gathering or analyzing threat intelligence.

• Working knowledge of digital forensic principles, techniques, and common forensic artifacts.

• Strong understanding of cybersecurity controls, defense-in-depth concepts, common attacker techniques, and frameworks such as MITRE ATT&CK.

• Experience with enterprise security technologies such as SIEM, EDR/XDR, firewalls, email security, DLP, UEBA, and cloud security platforms.

• Understanding of detection and rule engineering, including developing and tuning security rules, alerts, policies, and behavioral detections.

• Strong analytical, troubleshooting, documentation, and communication skills with the ability to independently manage complex investigations.

• Demonstrated ability to mentor, coach, and provide technical guidance to other cybersecurity professionals.

• Experience with security tool administration, scripting/automation, or security engineering is beneficial; these capabilities may also be developed on the job.

• Experience performing static or dynamic analysis of suspicious files, scripts, documents, or executables is a strong plus.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline, or equivalent professional experience.

Preferred Certifications:

Relevant industry certifications such as CISSP, GCIH, GCFA, GCIA, GNFA, GREM, CySA+, or equivalent certifications are preferred but not required.

Discover why our teams love working here:

Offer:140k

Benefits:

• 25 days annual leave per annum, remote, pension contribution, private medical, life assurance and personal travel insurance.

We are an equal opportunities employer and will consider all qualified applicants purely on their skills and abilities. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation, if needed.