Threat Management Specialist (Tier 2) jobs in United States
cer-icon
Apply on Employer Site
company-logo

Seneca Resources Company, LLC · 2 days ago

Threat Management Specialist (Tier 2)

Seneca Resources Company, LLC is a staffing and consulting firm that connects professionals with meaningful work. They are seeking experienced Threat Management Specialists (Tier 2) to support a 24x7 Cyber Security Operations Center, focusing on incident analysis, network traffic analysis, and advanced threat detection.

Oil & Energy
check
Comp. & Benefits
badNo H1BnoteSecurity Clearance Requirednote

Responsibilities

Perform Tier 2 incident analysis by correlating alerts, logs, and telemetry from multiple security platforms
Analyze network traffic to identify exploits, intrusions, and malicious activity
Assess impact to critical systems and sensitive data during security incidents
Execute incident response activities in accordance with SOC playbooks and SOPs
Escalate complex or high-risk incidents to senior threat management resources as needed
Provide subject matter expertise on network-based attacks, IDS/IPS technologies, and intrusion methodologies
Recommend and enhance detection mechanisms for exploit and intrusion attempts
Monitor, investigate, and respond to alerts across:
Splunk
Proofpoint (email security)
Cisco FirePower
SentinelOne
Microsoft Defender (Endpoint, XDR, Office 365, Cloud Apps)
Azure Entra ID
Google Cloud Security Command Center (SCC)
Perform threat intelligence analysis to assess risk and adapt defensive controls
Tune security policies and improve visibility across cloud and endpoint environments
Identify and support SOC automation and SOAR use cases
Leverage AI/ML-based tools to enhance anomaly detection, incident triage, and threat intelligence
Stay current on emerging threats, adversary techniques, and AI/ML advancements in cybersecurity
Collaborate with cross-functional teams to improve SOC processes, tooling, and response effectiveness

Qualification

Network traffic analysisThreat managementIncident responseIDS/IPS technologiesSIEM platformsCloud securitySOAR platformsAI/ML applicationsAnalytical skillsTCP/IP fundamentalsBoolean logicBehavioral analysisThreat intelligenceAutomationCommunication skillsDocumentation skillsIndependent workDocumentation

Required

8–12 years of relevant cybersecurity or IT security experience
Minimum 3+ years in IT security or SOC operations
2+ years of hands-on network traffic analysis
Strong knowledge of TCP/IP fundamentals
Network-level exploits and attack techniques
Threat management and incident response
Boolean logic
In-depth experience with IDS/IPS technologies, including signature-based and anomaly-based detection
IDS/IPS architecture, tuning, and content creation
Hands-on experience with SIEM, EDR, and email security platforms
Experience securing cloud environments (AWS, Azure, and/or GCP)
Exposure to or hands-on experience with SOAR platforms and security automation
Working knowledge of AI/ML applications in cybersecurity, such as anomaly detection, behavioral analysis, automated incident triage, threat intelligence enrichment
Strong analytical, documentation, and communication skills
Ability to work independently in an off-hours SOC environment
Bachelor's degree from an accredited college or university in a related field
If degree is not security-related, four (4) additional years of relevant experience may be substituted

Preferred

One or more preferred certifications: CISSP, GCED, GSEC, SSCP

Benefits

Comprehensive health, dental, and vision coverage
401(k) retirement plans

Company

Seneca Resources Company, LLC

twitter
company-logo
Seneca Resources Company, LLC, the exploration and production segment of National Fuel Gas Company, headquartered in Houston, Texas, explores for, develops, and produces natural gas in the Appalachian Region including the Marcellus and Utica Shales.

Funding

Current Stage
Growth Stage

Leadership Team

leader-logo
John McGinnis
Chief Operating Officer
linkedin
leader-logo
Todd Abbott
Chief Operating Officer
linkedin
Company data provided by crunchbase