Information Security Risk Analyst; SOC)

Position: Information Security Risk Analyst (SOC)

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Information Security Risk Analyst (SOC)

Regular Full-Time OB New York, New York, NY, US

Salary Range: $90,000.00 To $ Annually

This role is located in New York City and will require a hybrid work schedule of at least 2 days in office per week.

This role is for Officer level candidates.

About the Bank

Sumitomo Mitsui Trust Bank, Limited was established through the merger of The Sumitomo Trust and Banking Co., Ltd with Chuo Mitsui Trust and Banking, Ltd. on April 1, 2012. We are one of the largest asset managers in Asia and number one among Japanese financial institutions by AUM, with approximately $850 Billion USD in AUM. The Bank provides an assortment of financial solutions and manages a broad spectrum of financial products across its global branches.

Department Overview:

The Americas Division (“AD”) was established in the Sumitomo Mitsui Trust Bank, Limited, New York Branch) (“SMTBNY”) to perform corporate functions and supervise U.S. entities. Established under the AD are the “Global Banking Unit (“GBU”), Americas Division” and “Global Markets Unit (“GMU”), Americas Division” which performs business functions. Information Risk Governance (“IRG”) provides oversight to information and cyber security risk by maintaining and improving branch wide framework that is in-line with the Head Office and regulatory requirements and addresses Confidentiality, Integrity, and Availability for information assets.

IRG establishes appropriate policies, procedures, measurement, and monitoring processes to proactively assess and evaluate and cyber security and information security risks inherent in the Branch Operations. IRG is directly involved in all information and cyber security related projects, matters and issues.

Your

Role Overview :

The Security Operations Center (SOC) Analyst is responsible for monitoring, detecting, investigating, and responding to cybersecurity events and alerts across the organization’s technology environment. This role serves as a frontline defender within the Information Risk Governance Department, identifying potential threats, investigating suspicious activities, and supporting incident response efforts in order to protect the confidentiality, integrity, and availability of organizational assets.

Your

Duties and Responsibilities:

• Monitor and analyze security events and alerts generated by security systems such as the Security Information and Event Management (SIEM) system, Endpoint Detection & Response (EDR) system, Firewalls, Network Access Control (NAC), Network Detection & Response (NDR) system, and Intrusion Detection and Prevention (IDS/IPS) systems.
• Triage and analyze security alerts to determine severity, scope, and potential impact and business risk.
• Investigate suspicious system, network, and user activity, escalating potential security incidents to the Incident Response Team and Management as appropriate.
• Maintain awareness of the evolving cybersecurity landscape including emerging threats, attack techniques, vulnerabilities, and indicators of compromise (IoC)
• Conduct proactive threat-hunting activities to identify, investigate, and mitigate emerging threats, anomalous behavior, and potential indicators of compromise that may evade existing security controls.
• Participate as a member of the Incident Response Team during cybersecurity incidents and investigations. Tasks include documenting incident findings, actions taken, and to collect system log evidence and forensic artifacts.
• Maintain, administer, and tune SIEM and NDR Security tools including ongoing optimization of detection rules, use cases, dashboards, reports, and alert configurations.
• Liaise and coordinates with vendors, service providers, and contracts to support security operations and incident response activities.
• Assists with internal and external audits, regulatory examinations, and information security assessments.
• Assists with the evaluation, testing, and comparative analysis of security monitoring and SOC-related technologies.
• Serves as the subject matter expert…