Senior Information Security Analyst (REMOTE)

Hanover Insurance Group, Inc.; Worcester (MA); Hybrid; USD 110,000 - 150,000; Full time

Job summary

The Hanover Insurance Group, Inc. in Worcester, MA invites a Senior Information Security Analyst to join our Information Security team.

This full-time, exempt role serves as a first responder to security events and strengthens Hanover’s security posture through rapid containment and remediation. You will partner with IT, audit, HR and other stakeholders, analyze threats, develop indicators, lead incident handling, and mentor junior analysts.

Qualifications

• Bachelor’s degree in computer science or related field.
• 5+ years of related professional experience.
• Technical expertise in systems administration and security tools.
• Intermediate networking knowledge.
• Excellent independent and team collaboration skills.
• Be open to learning; certifications such as Security+, GSEC, SSCP or CEH are preferred.

Responsibilities

• Monitor IDS alerts, network and system logs to detect threats.
• Open incident tickets and document resolution.
• Monitor trend analysis and document findings.
• Perform incident response and threat analysis.
• Research security threats and develop IOC for detecting anomalies.
• Provide technical analysis and recommendations to senior team and leadership.
• Train and mentor other analysts.
• Coordinate team collaboration across the IT organization.

Skills

Security incident response

Threat intelligence

IDS/IPS monitoring

Log analysis

Cross-team collaboration

Mentoring

Leadership

Communication skills

Problem solving

Analytical thinking

Education

Bachelor’s degree in computer science or related field

Tools

IDS/IPS platforms

SIEM

Digital Forensics tools

Job description

The Hanover’s Information Security team is looking to bring on a Senior Information Security Analyst to join us in our Worcester, MA, Windsor, CT or remote work consideration.

This is a Full-time, Exempt role.

POSITION OVERVIEW

The Senior Information Security Analyst serves as a first responder to any security related events and key to Hanover’s security posture. You need to have SME on how these events affect Hanover and best security practices to defend or remediate such events.

Must have the ability to partner/collaborate with any team within the enterprise, such as IT, audit, HR, etc, to identify any current issue, educate associated teams, recommend options for remediation, and work issues through to resolution.

IN THIS ROLE, YOU WILL:

• Monitor IDS alerts, network and system logs, plus network traffic to detect and report threats
• Open Incident tickets for tracking of security events and document resolution
• Monitor trend analysis and document findings
• Performs work across multiple platforms with an intermediate depth of knowledge in each platform.
• Advise on Threats and Vulnerabilities aiding in prioritization of activities
• Research security threats and develop IOC (Indicators of Compromise) for detecting potential anomalies and patterns with infected systems
• Perform incident response to include security event analysis, incident handling, reporting, and threat analysis
• Provide technical analysis, design, support and make recommendations for various security applications, technologies, and products to Sr Team Members and Leadership.
• Provide situation reports for DFiR (Digital Forensics, Incident Response) or escalations to leadership.
• Training and mentoring of other analysts.
• Performs work across multiple platforms with a depth of knowledge in at least 2 of those platforms. This role will act as the escalation path for more junior staff, to validate findings and identify scope of events and support during larger investigations.
• May lead other team members on projects or initiatives. Assign task as appropriate.
• Coordinating team collaboration across the IT organization.

WHAT YOU NEED TO APPLY:

• Bachelor’s degree in computer science or related field or equivalent knowledge with 5+ year of related professional experience.
• Technical expertise in systems administration and security tools, combined with knowledge of security practices and procedures.
• Intermediate networking knowledge to include multiple protocols
• Excellent independent and team collaboration skills
• Experience working in complex environments with a high degree of organizational effectiveness
• Have the Ability and commitment to communicate effectively, consistently chooses communication methods to ensure critical information reaches and persuades intended audience
• Be a strong team player. Uses strong interpersonal skills to build partnerships with stakeholders and peers
• Have excellent analytical, decision-making and problem-solving skills.
• Openness to Learning – Expands knowledge base through traditional and non-traditional education to improve personal skills and abilities.
• Requiring some combination of the following certifications:
• OS Level Certifications
• Security+
• GSEC
• SSCP
• CEH