Lead Cyber Security Analyst, AVP

About the role

State Street is recruiting a Lead Cyber Security Operations Center (SOC) analyst to assist in the detection, triage, analysis and response to cyber-attacks. The analyst joins a 24/7, 365-day-a-year SOC team based in Singapore, which works with the Cyber Fusion Center's Advanced Threat, Cyber Threat Intelligence and Red/Purple teams. The role is Monday to Friday and is on-site in the State Street office in Singapore.

Key responsibilities

• Lead the cyber incident response process so that high-severity or long-running incidents are triaged, analyzed, contained, eradicated and returned to service in a timely way.
• Write author incident status updates and closure reports for leadership, and produce postmortems with lessons learned and recommendations.
• Keep incident response plans, playbooks and procedures up to date.
• Take part in cyber exercises such as tabletops and cyber ranges, and measure incident response performance with KRI and KPI metrics.
• Improve the incident response process, train and mentor SOC personnel, share knowledge across the Fusion Center and help develop the follow-the-sun model.

Required profile

• 4+ years in a cyber security SOC or incident response role (Tier 3/lead analyst, threat hunter, penetration testing, etc.).
• Experience investigating and managing major or complex cyber incidents end to end, and leading in a SOC or Fusion Center.
• Master's degree in cyber security, information technology, computer science or relevant experience.
• Certifications such as CISSP, CEH, OSCP, OSCE or GCIH, or another applicable security certification.
• Financial services experience is a plus.

Required skills

• Strong malware analysis and memory forensics expertise.
• Operating systems administration (Windows, Linux, Mac).
• Knowledge of TTPs and frameworks such as NIST and MITRE ATT&CK.
• Knowledge of computing, network, storage and cloud architectures.
• Security technologies: SIEM, EDR/EPP, AV, ID/PS, HIPS, web proxy/content filtering, AD, PKI and DNS.
• Scripting or software development experience (Python, PowerShell, SQL) is a plus.