Sr. SecOps Security Engineer - Bensalem, PA

Police and Fire Federal Credit Union; Bensalem Township (Bucks County); In loco; USD 110.000 - 140.000; Tempo pieno

Descrizione del lavoro

Police and Fire Federal Credit Union in Bensalem, PA seeks a Senior IT Security Analyst to oversee the detection, investigation, and mitigation of advanced cybersecurity threats. This role focuses on high-level incident response, threat hunting, and the ongoing enhancement of security monitoring tools to protect digital assets.

The position requires mentoring SOC analysts, developing SOPs and runbooks, and coordinating with infrastructure teams to remediate vulnerabilities.

Competenze

• 5+ years in a SOC environment with incident handling and digital forensics.
• Proficiency with SIEM platforms (Splunk).
• Strong understanding of TCP/IP, DNS, HTTP and traffic analysis.
• Familiarity with malware analysis and reverse engineering techniques.
• Excellent analytical and communication skills.

Mansioni

• Lead investigations of complex security incidents and coordinate remediation.
• Proactively hunt for undetected threats using analytics and threat intel.
• Manage and tune SIEM, IDS/IPS, and EDR tools.
• Integrate threat intelligence to update defenses.
• Mentor SOC analysts to raise team capability.
• Develop and refine SOPs, incident playbooks, and SOC runbooks.
• Assist in vulnerability management with infrastructure teams.

Conoscenze

SOC experience

SIEM (Splunk)

Network analysis

Malware analysis

Reverse engineering

Analytical skills

Communication

Strumenti

Splunk

Descrizione del lavoro

Sr. IT Security Analyst - Bensalem, PA

Information Technology Professional Bensalem, PA, US

2 days ago Requisition ID: 2238

Competitive Base Salary - Experience Required

****EXCELLENT MEDICAL, DENTAL, VISION BENEFITS: 75% to 90% of premiums covered by PFFCU*****

****401K – PFFCU contributes automatic 6% regardless of employee contribution after 1 year*****

********Great benefits, paid time off, and more! Become a part of the team today!******

Role Overview

The Senior IT Security Analyst is responsible for overseeing the detection, investigation, and mitigation of advanced cybersecurity threats. This role involves high-level incident response, threat hunting, and the continuous improvement of security monitoring tools and processes to protect the organization's digital assets.

Key Responsibilities

• Incident Response: Lead the investigation of complex security incidents; perform deep-dive forensics and coordinate remediation efforts to minimize impact.
• Threat Hunting: Proactively search for undetected malicious activity within the network using advanced analytical techniques and threat intelligence.
• Monitoring & Detection: Manage and fine-tune Security Information and Event Management (SIEM) tools, Intrusion Detection/Prevention Systems (IDS/IPS), and Endpoint Detection and Response (EDR) solutions.
• Threat Intelligence: Integrate and utilize threat intelligence feeds to stay ahead of emerging attack vectors and proactively update defensive postures.
• Mentorship: Provide technical guidance and mentorship to SOC analysts to enhance the overall capability of the team.
• Process Improvement: Develop, document, and refine Standard Operating Procedures (SOPs), incident response playbooks and SOC runbook.
• Vulnerability Management: Assist in identifying security gaps and coordinating with infrastructure teams to facilitate timely patching and mitigation.

Required Qualifications

• Experience: Extensive experience in a SOC environment (typically 5+ years) with a focus on incident handling and digital forensics.
• Technical Skills:
  • Proficiency with SIEM platforms (e.g., Splunk).
  • Strong understanding of network protocols (TCP/IP, DNS, HTTP, etc.) and traffic analysis.
  • Familiarity with malware analysis and reverse engineering techniques.
• Analytical Skills: Exceptional problem-solving abilities and a high attention to detail.
• Communication: Ability to communicate technical findings clearly to both technical teams and non-technical stakeholders.