Lead SOC Analyst

## Lead SOC Analyst Apply locations:
Culpeper, United Statestime type:
Full time posted on:
Posted Yesterday job requisition :

** ABOUT US
** We’re the world’s leading provider of secure financial messaging services, headquartered in Belgium. We are the way the world moves value – across borders, through cities and overseas. No other organisation can address the scale, precision, pace and trust that this demands, and we’re proud to support the global economy.

We’re unique too. We were established to find a better way for the global financial community to move value – a reliable, safe and secure approach that the community can trust, completely. We’re always striving to be better and are constantly evolving in an ever-changing landscape, without undermining that trust. Five decades on, our vibrant community reflects the complexity and diversity of the financial ecosystem.

We innovate diligently, test exhaustively, then implement fast. In a connected and exciting era, our mission has never been more relevant. Swift now has a presence in 200+ countries and legal territories to serve a community of more than 12,000 banks and financial institutions.

The Cyber Fusion Centre (CFC) is looking for a Lead SOC (Security Operations Center) Analyst to join us. This team is responsible for the prevention of Cyber Security incidents by monitoring, detection, and response to potential intrusions in real time within the Swift network.
As a Lead SOC Analyst, you will provide input to security strategy and control of systems, networks, physical infrastructure, people and information. You will participate in the design, communication and execution of policies/controls/procedures as appropriate for Swift and its customers, and as consistent with the company objectives, company reputation and regulatory requirements. In this role, you will act as an operational mentor, coaching junior members within the team.
** Swift is unable to sponsor an employment authorization for this position now or in the future.
**** What to Expect:
** You will:
* Lead the creation and operationalization of a formalized Threat Hunting program within the SOC
* Participate in a 24x7 SOC; occasional shift work is required for this position. Shift work typically includes one week per month Monday - Sunday, 11 AM - 7 PM and occasional holiday work; all other hours are standard working hours.
* Provide expertise & guidance to less senior team members
* Support Incident Response (IR) and Threat Detection development activities and report to Senior Management ensuring proper awareness and ownership
* Support the introduction and implementation of new capabilities and IR processes and procedures within the Cyber Fusion Centre
* Interact closely with Swift's Red Team to further enhance detection capabilities
* Lead and participate in IR simulation exercises from a blue team perspective
* Perform proper triage identification and scoping of incidents including identification, investigation, and follow-up of containment actions
* Participate in the identification, development and communication of IOCs
* Participate in the identification and coordination of eradication and remediation actions with various stakeholders and ensure timely follow-up.
* Enhance and tune tools for efficiently managing large collections of security events
* Stay abreast of changing technologies, emerging cyber threats and attack methodologies
** What will make you successful:*
* ** Technical Qualifications
*** Bachelor's degree in Computer Science, IT, or related field
* 8+ years of related working experience in a SOC, Incident Response, or Threat Hunting role
* Experience performing or leading threat hunting activities
* Experience with cloud technologies such as Azure, Google Cloud, or AWS
* Experience with security tools such as SIEM, IDS/IPS, EDR/XDR, SOAR, etc.
* Ability to learn in a fast-paced, multi-dimensional, technical environment
* Strong verbal and written communication and the ability to concisely and accurately document technical investigations
* Preferred Technical

Qualifications:

** Familiarity with Scripting languages such as PHP, Perl or Python and databases such as MySQL, and knowledge of…