Security Operations Analyst II

Job not on LinkedIn

🔥 1 minute ago

🐊 Florida, New York, +2 more states – Remote

🐊 Florida – Remote 🗽 New York – Remote 🌲 North Carolina – Remote ⚔️ Virginia – Remote

💵 $83k - $110k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🛡️ Security Operations

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CFA Institute

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 1947

📚 Education

💸 Finance

🤝 Non-profit

Education • Finance • Non-profit

CFA Institute is a global not-for-profit organization that provides finance education for investment professionals. It offers a diverse range of programs and certificates designed to meet the needs of finance professionals across various career stages and specializations, including the CFA Program, which is known for equipping individuals with the skills necessary for the investment industry. The institute promotes high standards of ethics and professional conduct, and it is involved in research and policy advocacy to shape the future of the finance industry. CFA Institute also facilitates professional networking and offers membership benefits for finance professionals worldwide.

📋 Description

• Investigate security alerts and events across endpoints, identities, email, cloud services and network infrastructure • Use Microsoft Defender XDR, Microsoft Sentinel and KQL to investigate suspicious activity, correlate telemetry and identify indicators of compromise and attacker behaviours • Own routine and moderately complex investigations, determining scope, severity and business impact • Review escalated security cases with the managed security service provider and senior analysts • Support incident response across identification, investigation, containment and recovery • Collect and analyse evidence to establish investigative timelines • Investigate phishing, suspicious email activity, credential compromise and cloud or identity-related security events • Contribute to proactive threat-hunting capability • Recommend improvements to detection coverage, hunting queries, playbooks and investigation procedures • Translate technical findings for technical and non-technical stakeholders and contribute to executive-ready security briefings • Participate in a rotational on-call schedule for significant or time-sensitive security incidents

🎯 Requirements

• Hands-on professional experience within a Security Operations Center, cybersecurity operations or a closely related technical security environment • Practical experience with Microsoft Defender and/or Microsoft Sentinel • Hands-on experience using KQL to query security data, investigate suspicious activity or support threat hunting • Strong understanding of SIEM and EDR/XDR technologies and their investigation telemetry • Demonstrable experience investigating security alerts and incidents across endpoints, identity, email and cloud environments • Experience investigating phishing, suspicious email activity and potential credential compromise • Ability to work independently through complex or ambiguous situations and recognise when escalation is appropriate • Understanding of incident-response processes, security investigation methodologies and attacker tactics and techniques, including familiarity with MITRE ATT&CK • Strong communication skills for translating technical findings to different audiences • Curiosity, continuous learning and interest in emerging cybersecurity threats, technologies and investigative techniques

🏖️ Benefits

• Eligibility for an annual incentive bonus • 12% employer contribution to a 401(k) or pension plan • Comprehensive medical benefits package • Health coverage • Generous time off • Competitive retirement plans • Flexible work options • Wellbeing and development programs