Sr. IT Security Analyst - Bensalem, PA

Pffcu; Bensalem Township (Bucks County); In loco; USD 95.000 - 125.000; Tempo pieno

Vantaggi offerti da questo lavoro

Excellent medical benefits

401(k) with company contributions

Paid time off

Descrizione del lavoro

PFFCU, based in Bucks County, is seeking a Senior IT Security Analyst to lead advanced incident response, threat hunting, and security monitoring initiatives. You will help refine SOC playbooks and runbooks while improving protection of digital assets.

The role requires 5+ years in a SOC, Splunk proficiency, malware analysis knowledge, and strong communication with both technical and non-technical stakeholders. Excellent benefits accompany this position.

Competenze

• 5+ years of experience in a SOC environment with incident handling and digital forensics.
• Proficiency with SIEM platforms (e.g., Splunk) and network protocol analysis.
• Experience with malware analysis and reverse engineering concepts.
• Strong communication skills to explain findings to technical and non-technical audiences.

Mansioni

• Lead the investigation of complex security incidents and coordinate remediation.
• Proactively hunt for threats using advanced analytics and threat intel.
• Manage SIEM/IDS/EDR tooling to monitor and detect security events.
• Integrate threat intel and update defensive postures with actionable insights.
• Mentor SOC analysts and help develop SOPs and runbooks.
• Assist in vulnerability management and coordination with infra teams.

Conoscenze

SOC operations

Incident handling

Threat hunting

Communication

Strumenti

Splunk

IDS/IPS

EDR tools

Network traffic analysis

Descrizione del lavoro

Sr. IT Security Analyst - Bensalem, PA

Information Technology Professional Bensalem, PA, US

2 days ago Requisition ID: 2238

Competitive Base Salary - Experience Required

****EXCELLENT MEDICAL, DENTAL, VISION BENEFITS: 75% to 90% of premiums covered by PFFCU*****

****401K – PFFCU contributes automatic 6% regardless of employee contribution after 1 year*****

********Great benefits, paid time off, and more! Become a part of the team today!******

Role Overview

The Senior IT Security Analyst is responsible for overseeing the detection, investigation, and mitigation of advanced cybersecurity threats. This role involves high-level incident response, threat hunting, and the continuous improvement of security monitoring tools and processes to protect the organization's digital assets.

Key Responsibilities

• Incident Response: Lead the investigation of complex security incidents; perform deep-dive forensics and coordinate remediation efforts to minimize impact.
• Threat Hunting: Proactively search for undetected malicious activity within the network using advanced analytical techniques and threat intelligence.
• Monitoring & Detection: Manage and fine-tune Security Information and Event Management (SIEM) tools, Intrusion Detection/Prevention Systems (IDS/IPS), and Endpoint Detection and Response (EDR) solutions.
• Threat Intelligence: Integrate and utilize threat intelligence feeds to stay ahead of emerging attack vectors and proactively update defensive postures.
• Mentorship: Provide technical guidance and mentorship to SOC analysts to enhance the overall capability of the team.
• Process Improvement: Develop, document, and refine Standard Operating Procedures (SOPs), incident response playbooks and SOC runbook.
• Vulnerability Management: Assist in identifying security gaps and coordinating with infrastructure teams to facilitate timely patching and mitigation.

Required Qualifications

• Experience: Extensive experience in a SOC environment (typically 5+ years) with a focus on incident handling and digital forensics.
• Technical Skills:
  • Proficiency with SIEM platforms (e.g., Splunk).
  • Strong understanding of network protocols (TCP/IP, DNS, HTTP, etc.) and traffic analysis.
  • Familiarity with malware analysis and reverse engineering techniques.
• Analytical Skills: Exceptional problem-solving abilities and a high attention to detail.
• Communication: Ability to communicate technical findings clearly to both technical teams and non-technical stakeholders.