Sr. Cyber Security Analyst

SMBC; North Carolina; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

Office/remote flexibility

Job summary

SMBC is seeking a Sr. Cyber Security Analyst to join the Security Operations Center and defend a global technology environment. You will monitor, investigate, and respond to threats, strengthening detection and incident response capabilities.

You will lead investigations, conduct threat hunting, maintain playbooks, and collaborate with detection engineering teams. Requires 5+ years in SOC/IR, MITRE ATT&CK knowledge, SIEM/EDR/XDR, Windows/Linux, and strong communication.

Qualifications

• 5+ years of cybersecurity experience, preferably in a SOC/IR environment.
• Experience investigating security incidents and analyzing complex threat activity.
• Strong ability to document investigations, findings, and recommendations clearly.

Responsibilities

• Monitor, investigate, and respond to security alerts, incidents, and suspicious activity across the enterprise.
• Lead technical investigations to determine root cause, assess impact, and support containment and remediation efforts.
• Conduct proactive threat hunting to identify emerging threats and security gaps.
• Maintain and enhance monitoring, detection, and incident response playbooks/procedures.
• Collaborate with detection engineering and security automation teams to improve visibility and reduce false positives.

Skills

SOC operations

Incident response

Threat hunting

Threat analysis

Security monitoring

MITRE ATT&CK

SIEM

Windows

Linux

Active Directory

Cloud security

Documentation

Communication

Education

CISSP

CEH

GCFA

Tools

EDR

NDR

XDR

UEBA

Job description

SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 130 offices and 80,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group, Inc. (SMFG) is the holding company of SMBC Group, which is one of the three largest banking groups in Japan. SMFG's shares trade on the Tokyo, Nagoya, and New York (NYSE: SMFG) stock exchanges.

In the Americas, SMBC Group has a presence in the US, Canada, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization's extensive global network. The Group's operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., SMBC MANUBANK, JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd.

JOB SUMMARY

As a Sr. Cyber Security Analyst, you will play a key role in protecting SMBC Group by helping detect, investigate, and respond to cyber threats. You will work within the Security Operations Center (SOC) to strengthen monitoring, incident response, threat hunting, and detection capabilities across a global technology environment.

In this role, you will analyze security events, identify root causes, improve detection coverage, and help enhance security controls. You will also contribute to initiatives that advance the SOC's capabilities through automation, threat intelligence, purple teaming, digital forensics, and incident response. This is an opportunity to work with modern security technologies, expand your expertise, and directly influence how we defend the organization.

PRINCIPAL DUTIES AND RESPONSIBILITIES

• Monitor, investigate, and respond to security alerts, incidents, and suspicious activity across the enterprise.
• Lead technical investigations to determine root cause, assess impact, and support containment and remediation efforts.
• Conduct proactive threat hunting activities to identify emerging threats and security gaps.
• Maintain and enhance monitoring, detection, and incident response playbooks and procedures.
• Partner with detection engineering and security automation teams to improve visibility, reduce false positives, and strengthen response processes.
• Evaluate adversary tactics, techniques, and procedures (TTPs) and validate the organization's ability to detect and respond to them.
• Support the implementation, management, and optimization of security tools and platforms.
• Contribute to projects and initiatives that improve SOC operations, incident response capabilities, and overall security maturity.

POSITION SPECIFICATIONS

• 5+ years of cybersecurity experience, preferably in a SOC, CSIRT, DFIR, or incident response environment.
• Experience investigating security incidents and analyzing complex threat activity.
• Experience documenting investigations, findings, and recommendations clearly and accurately.
• Strong understanding of security monitoring, incident detection, investigation, containment, and response processes.
• Knowledge of the MITRE ATT&CK framework, Cyber Kill Chain, and related threat analysis methodologies.
• Experience working with security technologies such as SIEM, EDR, NDR, XDR, and UEBA platforms.
• Strong knowledge of Windows and Linux operating systems.
• Experience with Active Directory and identity-related security concepts.
• Working knowledge of cloud technologies and cloud security principles.
• Strong analytical, problem‑solving, and organizational skills.
• Strong verbal and written communication skills.
• Ability to manage multiple priorities and work effectively in a results‑focused environment.
• Ability to work independently and make sound decisions during security investigations.

NICE TO HAVE

• Experience in threat hunting, digital forensics, purple teaming, detection engineering, security automation, or threat intelligence.
• Experience developing or tuning security detections and response workflows.
• Professional certifications such as GCIH, GNFA, GCFA, CEH, OSCP, CISSP, or equivalent.
• Experience working in a global enterprise or highly regulated environment, including financial services.

SMBC's employees participate in a Hybrid workforce model that provides employees with an opportunity to work from home, as well as, from an SMBC office. SMBC requires that employees live within a reasonable commuting distance of their office location. Prospective candidates will learn more about their specific hybrid work schedule during th