SOC Security Analyst II: Threat Detection & Response

BankUnited, N. A.; Florida; On-site; USD 85,000 - 135,000; Full time

Job summary

BankUnited is seeking a Security Operations Center professional to analyze cyber threat information across on-premises and cloud environments and implement measures to prevent threats. You will monitor logs, perform DFIR analysis, and coordinate incident response with IT teams.

The role requires knowledge of IDS/IPS, DLP, SIEM tools, and cloud security best practices, with a focus on timely remediation and clear communications to stakeholders.

Qualifications

• Bachelor's degree or higher in information security or related field, or equivalent combination of work and certifications is required.
• Experience with cloud security tools and scripting languages.
• Firm grasp of the design and implementation of effective IS controls.

Responsibilities

• Monitor and analyze network traffic, IDS/IPS, DLP events, security events and logs.
• Review daily reports and files to ensure compliance to policies and standards.
• Escalate non-compliance issues to the appropriate group and follow-up on remediation actions.
• Work with internal customers to respond to escalations.
• Provide investigation, triage, and mitigation of detected security events.
• Stay up to date with current vulnerabilities, attacks, and countermeasures.

Skills

DLP knowledge

SOX/GLBA knowledge

Security standards

Data analysis

Monitoring tools

SIEM/ESEM

AD and GPOs

TCP/IP networking

Analytical thinking

Communication skills

Team collaboration

Penetration testing

Networking background

Self-motivation

Forensic tools

Education

Bachelor's degree

Tools

AWS Security Hub

Azure Security Center

GCP Security Command Center

SOAR

SIEM

Job description

BankUnited is seeking a Security Operations Center professional to analyze cyber threat information across on-premises and cloud environments and implement measures to prevent threats. You will monitor logs, perform DFIR analysis, and coordinate incident response with IT teams.

The role requires knowledge of IDS/IPS, DLP, SIEM tools, and cloud security best practices, with a focus on timely remediation and clear communications to stakeholders.