Lead Analyst – Cyber Security Operations

🔥 18 hours ago

🌽 Illinois – Remote

🌽 Illinois – Remote

💵 $120k - $160k / year

⏰ Full Time

🟠 Senior

🔐 Security Analyst

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Hyatt

WebsiteLinkedInAll Job Openings

10,000+ employees

🍽️ Food & Beverage

✈️ Travel

🛒 Retail

Food & Beverage • Travel • Retail

Hyatt is a global hospitality company that operates a range of hotels, resorts, and vacation properties. Known for its commitment to providing exceptional guest experiences, Hyatt offers various accommodation options, from luxury to more affordable stays. The company also focuses on sustainability and community engagement, ensuring responsible business practices in the hospitality sector.

📋 Description

• Respond to Cyber Security incidents, remove attackers, and restore Hyatt operations with minimal disruption • Lead Cyber Security and Data Privacy incident response engagements, including triage, containment, eradication, recovery, evidence preservation, post-incident reviews, and corrective actions • Analyze detections across endpoints, cloud, SaaS, and AI as a subject matter expert • Perform forensic analysis, timeline reconstruction, telemetry-gap identification, and detection engineering • Conduct AI-assisted investigations, enrichment, threat hunting, and documentation • Work with supervised security agents and semi-autonomous workflows • Validate AI outputs and identify hallucinations or missing context • Measure AI effectiveness through accuracy, traceability, escalation quality, action success, and time savings • Identify gaps in Hyatt’s detection pipeline and build new detections • Perform proactive threat hunting across Hyatt and Hyatt Franchise environments • Serve as the SOC’s senior-most technical resource and differentiate legitimate from illegitimate behaviors • Prepare and present cyber defense program performance updates to senior leadership • Review incident response performance and identify program improvements • Serve as the escalation point for operations and security issues • Work off-shift hours as needed during incidents and participate in an on-call rotation • Lead process-improvement initiatives and own runbook/playbook governance • Coach and mentor L1 and L2 analysts • Build relationships with internal and external stakeholders

🎯 Requirements

• Minimum of five years’ experience in Cyber Security Operations or Incident Response • Extensive knowledge of Advanced Persistent Threats (APT) tactics, techniques, and procedures • Deep knowledge of TCP/IP and OSI network stacks and protocols • Technical skills with CrowdStrike CQL, SPL, KQL, SQL, Python, PowerShell, and SOAR • Familiarity with Zero-Trust Network Access, FIDO 2.0, EDR/XDR, WSG, ESG, WAF, sandboxes, network- and host-based firewalls, threat intelligence, and penetration testing • Experience in a high-intensity threat actor environment • Experience preparing and presenting status updates for executive leadership • Experience reviewing and updating Cyber Security Incident Response documentation and timeline reconstruction • Knowledge of SaaS, cloud, information systems terminology, controls, and practices • Strong verbal and written communication and presentation skills • Ability to interact effectively with different organizational areas and levels, including executive leadership • Familiarity with threat hunting and adversary tactics and techniques, including MITRE ATT&CK and Cyber Kill Chain • Familiarity with threat response frameworks, including SANS PICERL and NIST SP 800-61 • Familiarity with cyber and privacy regulatory requirements, including SEC cybersecurity disclosure rules, CCPA/CPRA, and GDPR • GIAC GCIH or equivalent certification from GIAC, ISC2, ISACA, CompTIA, or EC-Council • Bachelor’s degree or better in Cyber Security, Information Systems, or another security-related subject preferred; equivalent combinations of education, experience, and certification acceptable • Ability and willingness to work in a fast-paced, complex corporate environment • Ability to work on-call for cyber incidents • Ability to travel approximately 5% of work time • Proven ability to lead and coordinate a team of analysts • Strong coaching and mentoring skills for L1 and L2 analysts

🏖️ Benefits

• Annual allotment of free hotel stays at Hyatt hotels globally • Flexible work schedule • Wellbeing initiatives, including a complimentary Headspace subscription • Discount at the on-site fitness center • Global family assistance policy with paid time off following the birth or adoption of a child • Financial assistance for adoption • Paid Time Off • Medical insurance • Dental insurance • Vision insurance • 401K with company match