Senior Information Security Analyst – CSIRT

Jobtailor; Mount Laurel Township (NJ); On-site; USD 110,000 - 170,000; Full time

Job summary

Jobtailor is seeking an experienced information security professional in New Jersey to define and implement advanced security controls, risk assessments, and incident response guidance. You will work with internal partners to protect data, support enterprise security programs, and drive security improvements across multiple business lines.

The role requires 5–7 years' experience, a strong SIEM/UEBA background (Splunk and Azure Sentinel), and relevant certifications.

Qualifications

• Bachelor's degree preferred.
• 5–7 years of relevant experience.
• Expert knowledge of SIEM/UEBA solutions such as Splunk or Azure Sentinel.
• Familiarity with NIST Cybersecurity Framework, SANS Top 20, OWASP Top 10, MITRE ATT&CK.
• Certifications listed: GIAC (GCIA, GPEN, GWAPT, GCIH, GSEC, GCFA), CCNP, CCNA, CISSP, Cloud Security.

Responsibilities

• Define, develop, and/or implement technology controls and information security policies, programs, and tools.
• Provide specialized expertise and guidance on assessing risks and developing security solutions to mitigate risks.
• Lead projects of moderate to high complexity.
• Serve as a subject matter expert in at least one security domain.
• Provide complex reporting and analysis at enterprise level.
• Support customer service strategies and internal partnership quality.

Skills

Information security

Risk assessment

Data analysis

Security incident management

Education

Bachelor's degree

Tools

Splunk

Azure Sentinel

CrowdStrike

MS Defender for Endpoint

XSOAR

Job description

• Define, develop, and/or implement technology controls and information security policies, programs, and tools
• Provide specialized expertise and guidance on assessing risks, identifying gaps, and developing security solutions to mitigate risks and protect the Bank
• Participate in projects of moderate to high complexity
• Serve as a key resource and subject matter expert in at least one technology niche/field and/or line of business
• Provide complex reporting, analysis, and assessments at the functional, business line, or enterprise level
• Support the Bank's Customer Service Strategy
• Provide high-level customer service to internal partners, vendors, and customers
• Contribute to improvements in the partner/customer experience
• Participate fully as a team member and contribute to a positive work environment
• May provide leadership, training, and guidance to other team members
• Communicate project and issue status with the team
• Share information and knowledge and learn from others

Requirements

• Bachelor's degree preferred
• Information security certification / accreditation an asset
• 5-7 years of relevant experience
• Advanced knowledge of one or more technology controls / security domains, disciplines and practices
• Proficient to advanced knowledge of organization, technology controls / security / risk issues
• In-depth understanding of security controls/mechanisms and threat/risk assessment techniques for complex data, application and networking environments
• Expert knowledge of security incident and event management, log analysis, network traffic analysis, malware investigation and remediation, SIEM correlation logic and alert generation
• Ability to perform analysis and reporting using data mining techniques and present results to technical and executive stakeholders
• Understanding of NIST Cybersecurity Framework, SANS Top 20 Critical Security Controls, OWASP Top 10, and MITRE ATT&CK
• Basic programming skills, including scripting languages and PowerShell
• Expert knowledge of SIEM and UEBA solutions such as Splunk or Azure Sentinel, plus experience with CrowdStrike, MS Defender for Endpoint, and XSOAR
• Expert knowledge of enterprise IT operations, incident management, change management, access/identity management, security operations, vulnerability and compliance management, ticketing systems, incident ticket life cycle, and SLA terms
• Certifications listed: GIAC (GCIA, GPEN, GWAPT, GCIH, GSEC, GCFA), CCNP, CCNA, CISSP, cloud security
• Ability to perform sedentary work, multiple tasks, operate standard office equipment, concentrate for long periods, and read, write, comprehend instructions, and perform basic arithmetic
• Occasional domestic travel; no international travel

Core Competencies

Demonstrates advanced knowledge of information security controls, risk assessment techniques, and security incident management. Proficient in data analysis and reporting, with expertise in SIEM solutions and compliance frameworks.

Highest-signal resume keywords

• Information Security Certification
• Advanced Knowledge of Security Controls
• Expert Knowledge of SIEM Solutions
• Risk Assessment Techniques
• Data Analysis and Reporting

Hard Skills

• Security Incident Management
• Threat Assessment Techniques
• Data Mining Techniques
• Basic Programming Skills
• Log Analysis
• Network Traffic Analysis
• Malware Investigation
• Vulnerability Management
• Change Management
• Access/Identity Management

Soft Skills

• Customer Service
• Team Collaboration
• Communication

Certifications & Qualifications

• GIAC (GCIA, GPEN, GWAPT, GCIH, GSEC, GCFA)
• CCNP
• CCNA
• CISSP
• Cloud Security

Industry Keywords

• NIST Cybersecurity Framework
• SANS Top 20 Critical Security Controls
• OWASP Top 10
• MITRE ATT&CK
• Security Operations

Tools & Technologies

• Splunk
• Azure Sentinel
• CrowdStrike
• MS Defender for Endpoint
• XSOAR