Sr. Cyber Security Analyst

SMBC; Charlotte (NC); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

SMBC Group is seeking a Senior Cyber Security Analyst to strengthen monitoring, incident response, threat hunting, and detection capabilities within a global SOC.

You will analyze security events, lead investigations to root causes, refine playbooks, and collaborate with detection engineering and security automation teams to improve visibility, reduce false positives, and raise overall security maturity across Windows, Linux, AD, and cloud environments.

Qualifications

• 5+ years cybersecurity experience in SOC/CSIRT/DFIR or incident response.
• Experience investigating security incidents and analyzing threat activity.
• Experience documenting investigations clearly and accurately.
• Strong monitoring, detection, investigation, containment and response knowledge.
• Familiarity with MITRE ATT&CK and related methodologies.
• Experience with SIEM/EDR/NDR/XDR/UEBA platforms.
• Windows and Linux knowledge; Active Directory security concepts.
• Cloud technologies and cloud security principles.

Responsibilities

• Monitor, investigate, and respond to security alerts and incidents.
• Lead technical investigations to determine root cause and containment.
• Conduct proactive threat hunting to identify emerging threats and gaps.
• Maintain and enhance monitoring, detection, and incident response playbooks.
• Collaborate with detection engineering and security automation teams to improve visibility and reduce false positives.
• Evaluate adversary techniques and validate detection and response capabilities.
• Support the implementation and optimization of security tools and platforms.
• Contribute to projects that improve SOC operations and security maturity.

Skills

Security monitoring

Incident detection

Threat hunting

Analytical thinking

Communication skills

Tools

SIEM

EDR

NDR

XDR

UEBA

Cloud security tooling

Job description

Select how often (in days) to receive an alert:

SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 130 offices and 80,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group, Inc. (SMFG) is the holding company of SMBC Group, which is one of the three largest banking groups in Japan. SMFG’s shares trade on the Tokyo, Nagoya, and New York (NYSE: SMFG) stock exchanges.

In the Americas, SMBC Group has a presence in the US, Canada, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization’s extensive global network. The Group’s operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., SMBC MANUBANK, JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd.

JOB SUMMARY

As a Sr. Cyber Security Analyst, you will play a key role in protecting SMBC Group by helping detect, investigate, and respond to cyber threats. You will work within the Security Operations Center (SOC) to strengthen monitoring, incident response, threat hunting, and detection capabilities across a global technology environment.

In this role, you will analyze security events, identify root causes, improve detection coverage, and help enhance security controls. You will also contribute to initiatives that advance the SOC’s capabilities through automation, threat intelligence, purple teaming, digital forensics, and incident response. This is an opportunity to work with modern security technologies, expand your expertise, and directly influence how we defend the organization.

PRINCIPAL DUTIES AND RESPONSIBILITIES

• Monitor, investigate, and respond to security alerts, incidents, and suspicious activity across the enterprise.
• Lead technical investigations to determine root cause, assess impact, and support containment and remediation efforts.
• Conduct proactive threat hunting activities to identify emerging threats and security gaps.
• Maintain and enhance monitoring, detection, and incident response playbooks and procedures.
• Partner with detection engineering and security automation teams to improve visibility, reduce false positives, and strengthen response processes.
• Evaluate adversary tactics, techniques, and procedures (TTPs) and validate the organization's ability to detect and respond to them.
• Support the implementation, management, and optimization of security tools and platforms.
• Contribute to projects and initiatives that improve SOC operations, incident response capabilities, and overall security maturity.

POSITION SPECIFICATIONS

• 5+ years of cybersecurity experience, preferably in a SOC, CSIRT, DFIR, or incident response environment.
• Experience investigating security incidents and analyzing complex threat activity.
• Experience documenting investigations, findings, and recommendations clearly and accurately.
• Strong understanding of security monitoring, incident detection, investigation, containment, and response processes.
• Knowledge of the MITRE ATT&CK framework, Cyber Kill Chain, and related threat analysis methodologies.
• Experience working with security technologies such as SIEM, EDR, NDR, XDR, and UEBA platforms.
• Strong knowledge of Windows and Linux operating systems.
• Experience with Active Directory and identity-related security concepts.
• Working knowledge of cloud technologies and cloud security principles.
• Strong analytical, problem-solving, and organizational skills.
• Strong verbal and written communication skills.
• Ability to manage multiple priorities and work effectively in a results-focused environment.
• Ability to work independently and make sound decisions during security investigations.

NICE TO HAVE

• Experience in threat hunting, digital forensics, purple teaming, detection engineering, security automation, or threat intelligence.
• Experience developing or tuning security detections and response workflows.
• Professional certifications such as GCIH, GNFA, GCFA, CEH, OSCP, CISSP, or equivalent.
• Experience working in a global enterprise or highly regulated environment, including financial services.

SMBC’s employees participate in a Hybrid workforce model that provides employees with an opportunity to work from home, as well as, from an SMBC office. SMBC requires that employees live within a reasonable commuting distance of their office location. Prospective candidates will learn more about their specific hybrid work schedule during their interview process. Hybrid work may not be permitted for certain roles, including, for example, certain FINRA-registered roles for which in-office attendance for the entire workweek is required.

SMBC provides reasonable accommodations during candidacy for applicants with disabilities consistent with applicable federal, state, and local law. If you need a reasonable accommodation during the application process, please let us know at [e-mail].