Information Security Analyst - SOC Analyst

Information Security Analyst 3 - SOC Analyst

The Information Security Analyst 3 is responsible for supporting enterprise information security initiatives through risk analysis, security monitoring, incident response, compliance activities, security assessments, Identity and Access Management (IAM), and stakeholder consultation. This role serves as a key contributor in identifying, assessing, and mitigating cybersecurity risks while ensuring alignment with Enterprise Information Security policies, standards, and regulatory requirements.

The ideal candidate will possess a strong background in security operations, incident response, threat detection, security analytics, cloud security technologies, and identity security. This individual will partner with technology teams, security operations personnel, risk management partners, and business stakeholders to improve the organization's security posture, proactively address cyber threats, and support enterprise security governance initiatives.

Key Responsibilities

• Provide information security consultation to improve awareness and compliance with Enterprise Information Security policies, standards, and procedures.
• Perform remediation activities related to security assessments, audits, risk reviews, and control testing findings.
• Provide guidance and recommendations regarding mitigating controls and information security risk reduction strategies.
• Evaluate information security risk exposure through advanced data aggregation, analysis, and reporting.
• Review and interpret security policies, standards, and procedures while recommending improvements and enhancements.
• Support information asset portfolio reconciliation and certification activities.
• Review proposed control standards for business impact and provide recommendations for modifications and clarifications.
• Support enterprise risk, compliance, governance, audit, and security control programs.

• Participate in security monitoring, investigation, containment, escalation, and remediation activities.
• Support incident response processes utilizing established procedures, tools, and technologies.
• Perform threat hunting and investigative activities utilizing endpoint, network, identity, and cloud security telemetry.
• Analyze security events and alerts generated by security monitoring platforms.
• Support cyber threat detection and response efforts through security analytics and log analysis.
• Leverage offensive security concepts and adversarial thinking techniques to identify indicators of compromise, threat actor behaviors, and emerging threats.
• Conduct vulnerability assessment reviews and support remediation planning activities.

• Utilize Security Information and Event Management (SIEM) platforms to identify, investigate, and respond to security events.
• Leverage Security Orchestration, Automation, and Response (SOAR) tools to improve security operations efficiency.
• Analyze host, endpoint, network, cloud, and identity-related logs to identify suspicious activity and potential security incidents.
• Develop reporting, dashboards, and metrics related to security risks, incidents, and operational performance.
• Conduct threat hunting activities utilizing security analytics, endpoint telemetry, and event data.
• Support cybersecurity reporting, security metrics development, operational dashboards, and risk exposure analysis.

• Support enterprise Identity and Access Management (IAM) programs and security controls.
• Assist with Identity Governance processes, access reviews, certification activities, and entitlement validation.
• Support provisioning and deprovisioning controls and related compliance initiatives.
• Review and analyze identity security risks associated with access management processes.
• Support Privileged Access Management (PAM) initiatives and enterprise access control programs.
• Assist with implementation and validation of identity-related controls including authentication, authorization, and Attribute-Based Access Control (ABAC) frameworks.

• Conduct security control testing and validation activities.
• Assess effectiveness of security controls and identify opportunities for improvement.
• Support compliance initiatives and regulatory requirements within the enterprise environment.
• Partner with risk, compliance, audit, and technology teams to ensure effective governance and control coverage.
• Assist with development and delivery of Information Security Awareness and Education programs.
• Support vulnerability management processes, remediation efforts, and enterprise security governance initiatives.
• Participate in security assessments and control reviews to improve overall risk posture.

• Support security monitoring and investigative efforts across:
• Microsoft Azure
• Office 365
• Google Cloud Platform (GCP)
• Cloud-based environments
• Monitor and analyze security events generated from Endpoint…