Job Description
Lead Cyber Security Operations Analyst
\n
\n
A prominent financial services firm is seeking a senior level security professional to join their growing operations center in Springfield Massachusetts. This is an advanced technical role designed for a mastery level analyst who enjoys solving complex problems and implementing innovative defensive solutions.
\n
\n
The successful candidate will act as a primary technical lead within the Security Operations Center. You will be responsible for performing deep malware analysis and extracting indicators of compromise to strengthen the firm's threat intelligence. A major component of this role involves developing SOAR automations and collaborating with data science teams to build agentic AI capabilities for the SOC.
\n
\n
Key Responsibilities
\n
\n
Serve as a senior escalation point and mentor for junior analysts
\n
Perform advanced malware analysis and threat hunting
\n
Design and deploy automated workflows within SOAR platforms
\n
Develop new detection logic and tune existing alerting rules
\n
Partner with security intelligence and offensive teams to improve prevention
\n
Ensure quality control and thorough documentation of security incidents
\n
Communicate complex technical risks to senior leadership
\n
\n
Basic Qualifications
\n
\n
Eight or more years of experience in a technical security operations role
\n
At least one year of experience utilizing AI models to improve security functions
\n
Two or more years of professional experience programming in Python
\n
Two or more years of experience with SOAR platform automation
\n
Availability to support emergency escalations outside of standard business hours
\n
\n
Preferred Skills and Experience
\n
\n
Degree in Cybersecurity or a related technical field
\n
Industry certifications such as CISSP CISM GCIH GCFR or similar GIAC credentials
\n
Deep expertise in the MITRE ATT AND CK framework
\n
Advanced scripting skills in Python and PowerShell
\n
Strong understanding of web application vulnerabilities and authentication flows like SAML and OAUTH
\n
In depth knowledge of cloud environments including AWS and Azure
\n
Expertise in operating system internals for Windows Mac and Linux
\n
Proficiency in packet level analysis and network protocols
\n
\n
This organization provides a mission driven environment that emphasizes long term impact and professional development. You will work within a collaborative culture that offers clear ownership of tasks and direct connection to business outcomes. The company is committed to inclusion and offers extensive internal networks for continuous learning and career growth.
\n
\n
This is an excellent opportunity for a seasoned analyst who wants to work at the intersection of traditional security operations and cutting edge automation and AI technologies.