Cyber Fusion Threat Response Analyst

Responsibilities

• Collaborate with Cyber Architecture and Engineering team to assist with the design, implementation, and administration of various security technologies which relate to threat hunting, threat detection, and the overall Cyber Fusion Center.
• Work closely with counterparts in IT and across the Cyber Fusion Center to align technical solutions with business needs.
• Apply a structured business architecture approach and methodology for capturing the key views of the enterprise.
• Collaborate with Cyber Intelligence, Security Operations Center analysts, and Offensive Security analyst to effectively conduct tactical and strategic threat hunting efforts that are pertinent to State Street and its subsidiaries and affiliates.
• Assist with the identification of log sources that are valuable to threat hunting and detection.
• Assist with the onboarding and tuning of log sources to provide better effectiveness.
• Extensive knowledge of Advanced Persistent Threat (APT) groups and Tactics, Techniques, and Procedures used by APT groups.
• Knowledge of the MITRE ATT&CK framework and its usage for improving threat detection and prevention capabilities.
• Ensure the effective management and delivery of cyber fusion services.
• Support development and implementation of Cyber Fusion Center strategies aligned to key State Street risk and business needs; support the design and implementation of Cyber Fusion Center/SOC operating models, identifying, evaluating, and providing solutions via a threat and intelligence‑based approach.
• Build and nurture positive working relationships with the intention to exceed client expectations.
• Work cross‑functionally with team members to support and drive a collaborative team environment.

• 5-10 years of experience in cyber security, information security, a security related field, or other complex information risk management function.
• Ability to communicate with and appropriately influence all levels of management.
• Excellent interpersonal, communication (written and verbal), and presentation skills.
• Excellent problem‑solving abilities and organizational/time management skills.
• Strong attention to detail and willingness to "roll up sleeves".
• Ability to work independently as well as collaboratively.
• Intellectually curious and willing to invest time in researching areas outside current knowledge base/skill set.
• Bachelor of Science in Computer Science, Information Security, Engineering or equivalent experience and certifications (such as OSCP, OSCE, GREM, GCFA, GNFA, etc.).
• Additional requirements:
  
  CISA, CRISC or a CISSP is required.
• Previous experience in banking industry a plus.