Security Operations Analyst - MassMutual

The OpportunityAs a Senior Security Operations Center (SOC) analyst you’ll have an opportunity to be part of a growing team of highly technical Cybersecurity analysts who are passionate about protecting MassMutual’s assets and customers by leveraging problem solving skills and innovative technology solutions.

In this role, as well as all roles within MassMutual, you will demonstrate accountability, agility, a dedication to be inclusive, a strong business acumen, and will show courage, even in the most difficult situations.

We also highly value strong communication skills, a passion for learning, leadership traits, resilience, and self-awareness.

The TeamOur team is comprised of a diverse group of passionate individuals from across the globe helping us to achieve a 24x7x365 follow the sun support modelThe Impact : Perform advanced Malware analysis and extract Indicators of Compromise (IOCs) to feed our Threat Intelligence PlatformIdentify, classify, and document adversary Tactics, Techniques and Procedures (TTPs)Work collaboratively with our Security Intelligence team to enrich and enhance prevention, detection, and threat hunting capabilities.

Partner with our Security Platforms team to develop playbooks for our SOAR platformOptimize alerting platforms through rule development and tuning of existing alerting logic.

Act as team lead, mentor Junior Analysts, be a go to escalation point for other SOC analystsCoordinate incident response effortsPerform QA responsibilities ensuring thorough analysis and documentationThe Minimum QualificationsAssociate’s degree in cyber security or related Field5+ years’ experience working in a Security Operation Center2+ years’ experience writing in Python, PowerShell and RegexWilling to work Monday - Friday 8-hr shift, should an escalation be received between 1p - 11pm EST from L1 or L2 Shift Analyst in US, potential on-call workThe Ideal QualificationsBachelor’s degree in cyber securityCertifications : CISSP, CISM, CISA, GCIH, GCFRKnowledge of and practical experience with the MITRE ATT&CK frameworkMastery of Python, PowerShell or other scripting languagesExperience working with a SIEM platform mining large datasetsUnderstanding of web application vulnerabilities including XSS, CSRF, SQL Injection, command injection and serialization attacksInterest in continuous learning and a passion for CybersecurityExperience and confidence communicating with and presenting to senior leadershipStrong written and verbal communication skillsStrong analytical and problem-solving skillsExperience developing automations in SOAR platforms to further enhance the SOC’s capabilities.

In depth knowledge of operating systems process relationships and file structures (Windows, Mac, Linux).Functional experience developing new detections for alerting platforms.

Expert level knowledge of Cybersecurity attack and defense techniquesStrong understand of web authentication flows such as SAML and OAUTHFunctional knowledge of cloud environments such as AWS and Azure.

Relevant Cyber Security GIAC Certification such as CISM, CEH, GCIH, GCDA or similar.Understanding of living off the land techniques used by adversaries, using tools such as PowerShell, WMIC, Task Scheduler, Windows Registry etc.

What to Expect as Part of MassMutual and the TeamRegular meetings with the Director of the US Security Operations CentersFocused one-on-one meetings with your managerAccess to mentorship opportunitiesNetworking opportunities including access to Asian, Hispanic / Latinx, African American, women, LGBTQIA+, veteran and disability-focused Business Resource GroupsAccess to learning content on Degreed and other informational platformsYour ethics and integrity will be valued by a company with a strong and stable ethical business with industry leading pay and benefits#LI-RK1MassMutual is an Equal Employment Opportunity employer Minority / Female / Sexual Orientation / Gender Identity / Individual with Disability / Protected Veteran.

We welcome all persons to apply. Note : Veterans are welcome to apply, regardless of their discharge status.If you need an accommodation to complete the application process, please contact us and share the specifics of the assistance you need.