Senior Information Security Analyst (SecOps)

DLA Piper; Baltimore (MD); On-site; USD 94,490 - 131,164; Full time

Benefits offered by this job

Medical, Dental, and Vision Insurance

401(k) plan

Hybrid work arrangement

Job summary

DLA Piper is looking for a Senior Information Security Analyst responsible for identifying and addressing threats. The role focuses on security incident management, mentoring security analysts, and maintaining security protocols.

Qualifications include a Bachelor's or Master's degree in Information Security and 7 years of cybersecurity experience. The position offers a competitive salary range of $94,490 – $131,164, with hybrid work options available.

Qualifications

• 7 years of experience in cybersecurity.
• Bachelor's or Master's degree in Information Security or related field.
• Professional-level industry certification (e.g., CISSP, GIAC, SANS).

Responsibilities

• Mentor and guide Information Security Analysts.
• Evaluate and improve information security programs.
• Review SIEM systems and metrics.
• Perform alert triage and incident analysis.
• Manage Endpoint Threat Detection tools.
• Engage in Threat Hunting.

Skills

Communication

Analytical

SIEM Proficiency

Incident Response Knowledge

Scripting

Attacker Methodology

Intrusion Detection

Cloud Security

Core Infrastructure

Security Tools

Education

Bachelor's Degree in Information Security

Master's Degree in Information Security

Tools

Microsoft Defender

CrowdStrike

Palo Alto Networks

Job description

Summary

The Senior Information Security Analyst is responsible for identifying, investigating, and addressing both internal and external threats. This position requires a deep understanding of various threats, attacks, and malware to develop effective detection and protection measures for the enterprise. The analyst collaborates with the IT department to maintain security controls, including tuning detection systems, updating control policies, and automating processes. The role involves managing relationships with security operations vendors and providing technical leadership and mentorship to a team of security analysts. It plays a critical role in driving initiatives for advanced threat detection, incident response, and vulnerability management, maintaining a proactive and robust security posture.

Location

This position can sit in our Washington DC, Atlanta, Austin, Baltimore, Chicago, or Northern Virginia office and offers a hybrid work schedule.

Responsibilities

• Mentoring and guiding Information Security Analysts.
• Evaluate the effectiveness of and improve various information security program functions.
• Review Security Incident and Event Management (SIEM) systems, including regular reporting of metrics and summaries regarding ongoing investigations and ticket tracking.
• Perform alert triage, investigating and analyzing security incidents, identifying root causes, and developing mitigation strategies.
• Ensure effective Endpoint Threat Detection, including EDR, antivirus, asset management, and familiarity with baseline and configuration management tools.
• Manage Next Generation Firewalls and/or Intrusion Detection/Prevention Systems (IDS/IPS).
• Engage in Threat Hunting and utilize Threat Intelligence.
• Utilize malware sandbox technologies and interpret the results.
• Oversee Incident Response tools, processes, and capabilities.
• Possess experience or a deep understanding of vulnerability and configuration management.
• Conduct independent project work.
• Provide leadership to and manage a team, including coaching, mentoring, professional development, and regular performance feedback.

Desired Skills

• Communication: Proficient verbal and written communication, conveying technical information to non‑technical audiences.
• Analytical: Strong analytical abilities with keen attention to detail for identifying and addressing security events.
• SIEM Proficiency: Skilled in identifying, triaging, and analyzing security events using SIEM systems.
• Incident Response Knowledge: Deep understanding of incident response processes and methodologies.
• Scripting: Familiarity with scripting languages to automate security operations and enhance incident response.
• Attacker Methodology: Understanding of attacker methodologies to support proactive defense measures.
• Intrusion Detection: Grasp of intrusion detection systems, AI‑based detection and prevention strategies, and SOC operations.
• Cloud Security: Knowledge of cloud infrastructure and security considerations.
• Core Infrastructure: Familiarity with DNS, Active Directory, and Exchange.
• Security Tools: Experience with Microsoft Defender, CrowdStrike, Palo Alto Networks, and related tools.
• Professional Services Background: Preferred experience in legal, finance, or consulting sectors.

Minimum Education

• Bachelor's Degree in Information Security, Cybersecurity, or similar fields.

Preferred Education

• Master's Degree in Information Security, Cybersecurity, or similar fields.

Certifications

• Professional‑level industry certification (e.g., CISSP, GIAC, SANS).

Minimum Years Of Experience

• 7 years of experience working within the cybersecurity field.

Essential Job Expectations

• Effectively communicate, verbally and in writing, with clients, lawyers, business professionals, and third parties.
• Produce deliverables, answer phone calls, and reply to correspondence efficiently and responsively.
• Provide timely, accurate, and quality work product.
• Successfully meet deadlines, expectations, and perform work duties as required.
• Foster positive work relationships.
• Comply with all firm policies and practices.
• Engage in both physical and sedentary activity, such as extended computer work, digital/virtual conference calls, and meetings as needed.
• Ability to work under pressure and manage competing demands in a fast‑paced environment.
• Perform all other duties, tasks, or projects as assigned.

Physical Demands

Sedentary work: Exerting up to 10 pounds of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, pull, or otherwise move objects, including the human body. Sedentary work involves sitting most of the time. Jobs are sedentary if walking and standing are required only occasionally and all other sedentary criteria are met.

Work Environment

The individual selected for this position may have the opportunity for a hybrid work arrangement comprised of remote and in‑office work. The requirement for which will be determined in coordination with the hiring manager or supervisor and may be modified in the firm’s discretion in the future.

Accommodation

Reasonable accommodations may be made upon request to permit individuals with a disability to perform the essential functions and responsibilities of the position or to participate in the job selection process.

Compensation

The firm’s expected hiring range for this position is $94,490 – $131,164 depending on the candidate’s geographic market location. Compensation also depends on experience, skills, educational and professional background, and overall qualifications. A comprehensive package of benefits is offered, including medical, dental, vision insurance, and a 401(k) plan.

EEO Statement

DLA Piper is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.