Senior Cyber Threat Analyst

The financial services industry is constantly under attack by sophisticated cyber adversaries that range from nation states to criminals. In response, the Raymond James Cyber Threat Center (CTC) is charged with ensuring all equities are secure against all tiers of adversaries. We are the central hub for Computer Network Operations and are on the front lines of security incident response, threat hunting, and intelligence. You'll be working with emerging technologies to solve challenging security problems in a fast-paced and continuously evolving environment, while helping steer the direction and evolution of the team. This highly visible team within the organization evaluates threats to the environment and dynamically adjusts to the ever-changing threat landscape by applying practical security knowledge to developing new detective measures to protect the firm.

Responsibilities

Serve as a primary member of the Cyber Threat Center (CTC) handling security events and incidents daily; Act as an Incident Handler for minor and major security incidents; Quickly analyze threats, understand risk, deploy effective countermeasures, and make business critical incident response decisions; Maintain situational awareness for cyber threats across the global firm and take action where necessary; Maintain knowledge of security principles and best practices and remain current with emerging threats and trends; Assist teams in security and privacy risk mitigation efforts including incident response; Lead or participate in information security related projects or managing strategy; Conduct forensic investigations for HR, Legal, or incident response related activities; Develop new forensic detective and investigative capabilities using current technical solutions; Work with various business units and technical disciplines as a security consultant for cyber threats; Act as escalation point for managed security services and associates; Conduct countermeasure deployment, malware and exploit analysis, intrusion monitoring and response, alert assessment, threat detection content development, data analysis and threat research; Limited weekend after-hours / on-call cyber threat support rotation may be required

Requirements

B.S. in Computer Science, Computer Engineering, MIS, or related degree; A minimum of 5 years in Information Technology, including at least 3 years of related experience in Information Security, 2 years in conducting Cyber Network Defense, and 3 years of experience with incident response methodologies, malware analysis, penetration testing, scripting and/or forensics; An equivalent combination of education, training and experience; One or more of the following certifications or ability to obtain within 1 year: CISSP, SANS GCIH, SANS GCIA, SANS GCFE, SANS GNFA, SANS GREM, OSCP, OSCE; Knowledge of networking and common network protocols; Intrusion response and incident management lifecycle and processes; Windows, Linux, memory forensics; Log analysis (endpoint, network, email, cloud); Vulnerabilities and manipulating exploit code for analysis; Systems administration in Linux, Unix, Windows or OSX; Common infrastructure systems used as enforcement points; Current developments and trends in area of expertise; Skill in analysis, communication, judgment and decision making, building effective relationships, and client focus; Ability to perform static and dynamic malware analysis; Analyze large data sets and identify anomalies; Quickly create and deploy countermeasures under pressure; Create complex scripts, develop tools, or automate processes in PowerShell, Python or Bash

Benefits

Medical, dental, and vision insurance; Life insurance; Critical illness insurance and accident insurance; Disability benefits; Retirement savings; Paid time off including vacation, holidays, and sick leave; Parental leave