Be an early applicantLess than 25 applicants

This job has closed.

Company

Original Job Post

myGwork - LGBTQ+ Business Community · 2 days ago

Senior Cloud Security IR Analyst

Boston, MA

Full-time

Onsite

Senior Level

$110K/yr - $185K/yr

7+ years exp

Wonder how qualified you are to the job?

Maximize your interview chances

Internet

Insider Connection @myGwork - LGBTQ+ Business Community

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Ensure the security of State Street by delivering exceptional detection and response capabilities in public cloud environments

Design and implement incident response capabilities for cloud, including to support triage, investigation, evidence collection, containment, and remediation

Directly deliver tactical capability enhancements, partner with internal engineering teams and vendors on large-scale capability development

Plan and lead tabletop exercises and hands-on response simulations to assess and develop response capabilities

Deliver customised training and awareness programs to key operational teams on incident response techniques for relevant cloud platforms

Represent Security Operations on strategic cloud projects, providing input and assistance around incident readiness, incident response, and other operational security concerns

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Cloud SecurityAWSAzureSaaS ApplicationsSecurity Incident ResponseThreat DetectionThreat HuntingMITRE ATT&CK FrameworkSIEMEDRCSPMGuardDutySentinelCloudTrailScriptingSystem IntegrationPythonPowerShellSolution DesignProject ManagementProblem-SolvingCommunicationCollaborationInfluencePartnership BuildingTeamworkTabletop ExercisesResponse SimulationsTechnical TrainingIncident Response

Required

Deep expertise in cloud security, specifically infrastructure platforms such as AWS and Azure, and common enterprise SaaS applications

Exposure to security incident response, specifically incidents involving cloud infrastructure and SaaS applications

Experience with cloud native security capabilities and features (e.g., GuardDuty, Sentinel, CloudTrail etc), common enterprise security tools (SIEM, EDR, etc), and cloud-specific security tools (e.g., CSPM)

Experience developing and deploying tools and capabilities which enable threat detection or response

Significant experience securing AWS, and preferably at least one other cloud infrastructure platform

Strong foundational security knowledge, with specific expertise in threat detection, incident response, threat hunting, or similar

Understanding of current security threats and other challenges, as well as frameworks like MITRE ATT&CK

Familiarity with common enterprise security tools, specifically SIEM, EDR, and NSM tools

Experience with scripting, system integration, and light development (e.g., Python, PowerShell, other scripting)

Experience managing technology projects including solution design, deployment, and enhancement

Exceptional communication and presentation skills (verbal and written), a collaborative approach, and ability to influence and build partnerships with diverse stakeholders

A track record of succeeding in distributed, international teams

7+ years of relevant security experience

Direct experience securing cloud infrastructure in AWS, and preferably hands-on experience of cloud incident response

Strong experience with cloud infrastructure is essential (either AWS or Azure)

Preferred

Experience planning and executing tabletop exercises and response simulations would be beneficial

Experience developing and delivering technical training would be beneficial

Relevant cloud security or IR certifications would be beneficial (e.g., CSA CCSK, GIAC GCFR / GCIH / GCFA), as would certifications from AWS, Microsoft, or other key cloud providers

A degree is not required for this role, but a qualification in information security or information systems may be beneficial