Security Threat Analyst (SOC Lead) (Hybrid – Flexible Options)

About the job

At Broadridge, we’ve built a culture where the highest goal is to empower others to accomplish more. If you’re passionate about developing your career, while helping others along the way, come join the Broadridge team.

The Broadridge Cybersecurity Monitoring Team is looking to hire a Senior Threat Analyst (SOC Lead)!

In this role you will assist with daily security event monitoring and perform comprehensive threat analysis, implementing the appropriate course of action, mitigation, and remediation. You will provide guidance on the development of security monitoring strategies. This role will greatly work with AWS technologies and Azure. Candidate should have solid grasp of either AWS or Microsoft 365 Defender.

This position has the option of full-time work from home or be based out of the many Broadridge locations throughout the US. https://www.broadridge.com/contact#locations

Responsibilities

Assists with daily security event monitoring, analyzing events and investigating security-related alerts.

Build Threat Hunting models for Endpoints and Network Traffic. Focusing on critical systems within network to detect, respond and handle incidents related to unauthorized activity, malware, and APTs

Build and maintain security orchestration, playbooks, dashboards and automation.

Ability to adopt either AWS or Azure cloud technologies and develop alerts to monitor for security anomalies.

Find opportunities to improve efficiency and automate manual processes.

Perform training when needed.

Understand cloud technologies and services to onboard logs and develop alerts for security anomalies.

Use tools such as Microsoft O365 Defender, Proofpoint and Splunk to provide effective security monitoring and threat hunting.

Cover rotating US on call for Security Monitoring.

Project Lead for security monitoring projects.

Perform occasional presentations, audit support, and attend to documentation.

Qualifications

• 5+ years of demonstrated ability in an Information Security domain with at least 2 years in Security Monitoring\Threat Hunting.
• Proven experience with security information and event management (SIEM), security orchestration and automated response (SOAR)
• Good interpersonal skills and ability to set priorities and handle multiple projects concurrently.
• Familiar with Splunk.
• Strong knowledge of either AWS or Azure
• Knowledge of networking, operating systems and web technologies (Internet security).
• Understanding of networking concepts and protocols (such as HTTPS, DNS, SMTP, SFTP, TLS, etc.).
• A Plus: Knowledge of secure practices for deployment orchestration and automation, such as, Jenkins, Terraform, Puppet, Chef.
• Strong Plus: Familiar with Microsoft O365 Defender
• Strong Plus: Python, working with AWS Lambda, developing and maintaining REST APIs
• Certifications with AWS, Azure, GIAC, CISSP, CCSP, CCSK are a plus but not required
• Bachelor or higher degree in Computer Science, Computer Engineering, similar subject area or demonstrated experience in a similar role.
• Capable of passing a deep technical interview.

LI-NO1

Disability Assistance

We recognize that ensuring our long-term success means creating an environment where everyone is welcome, where everyone’s strengths are valued and where everyone can perform at their best. Broadridge provides equal employment opportunities to all associates and applicants for employment without regard to race, color, religion, sex (including sexual orientation, gender identity or expression and pregnancy), marital status, national origin, ethnic origin, age, disability, genetic information, or military or veteran status and other protected characteristics protected by applicable federal, state, or local laws. US applicants: Click here to view the “EEO is the Law” poster. If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation in the event you are unable or limited in your ability to use or access the Company‘s career webpage because of your disability. You may request a reasonable accommodation(s) by calling 888-237-7769 or by sending an email to [email protected].protected characteristics protected by applicable federal, state, or local laws. US applicants: Click here to view the “EEO is the Law” poster. If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation in the event you are unable or limited in your ability to use or access the Company‘s career webpage because of your disability. You may request a reasonable accommodation(s) by calling 888-237-7769 or by sending an email to [email protected].