Cyber Intelligence Fusion Analyst serves as the proactive analysis and threat-hunting engine for the J361 SOC, synthesizing all-source threat reporting to conduct structured threat hunts, perform proactive environment sweeps, and deliver tailored analytical reports and briefings to senior leadership.
Compensation
Pay Range $107,900.00 - $195,050.00
Responsibilities
Ingest, analyze, and synthesize cyber threat reporting
Correlate external threat intelligence with enterprise telemetry
Conduct proactive IOC sweeps and hypothesis-driven threat hunts
Characterize adversary infrastructure and TTPs
Develop hunt plans and detection logic
Requirements
Bachelor’s degree in cybersecurity, information technology, computer science, intelligence studies, or a related technical discipline
The SOC Analyst will serve as our front-line defense against cyber threats. You will monitor our enterprise environment using advanced security tools, analyze real-time security alerts, and perform initial triaging to determine severity.
Responsibilities
Continuously monitor Security Information and Event Management (SIEM) consoles, EDR platforms, and network dashboards for potential security incidents.
Perform initial analysis on high-volume alerts to filter out false positives and accurately categorize true security events.
Escalate validated threats to Tier 2/3 analysts or incident responders with clear, comprehensive technical documentation.
Review and interpret logs from various sources—including firewalls, intrusion detection systems (IDS/IPS), active directory, endpoints, and cloud environments (AWS/Azure).
Triage suspected employee phishing reports by analyzing email headers, attachments, and embedded URLs in a secure sandbox.
Requirements
Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent hands-on experience
As a member of our Security Operations Center (SOC), you will lead the investigation and response to complex cyber threats, drive continuous improvement of detection and response capabilities, and act as a senior escalation point for the SOC team.
Investigate, validate, and respond to complex security incidents escalated by CrowdStrike Falcon Complete MDR Service, SOC analysts, users, and other IT departments.
Lead investigations of advanced security incidents using CrowdStrike Falcon, Microsoft Defender, SIEM platforms, and other security technologies.
Analyze alerts, suspicious activity, attack patterns, and threat actor behavior using endpoint telemetry, threat intelligence, cloud telemetry, and SIEM data.
Perform advanced root cause analysis, determine attack scope and impact, and provide detailed findings and recommendations.
Lead containment, eradication, and recovery activities for major security incidents.
Lead cybersecurity consulting engagements, performing vulnerability assessments, penetration testing, red teaming, and secure architecture reviews for EY clients.
Responsibilities
Conduct vulnerability assessments and penetration testing across web applications, networks, APIs, cloud environments and infrastructure
Apply vulnerability assessment methodologies and support remediation validation
Use security testing tools such as Burp Suite, Nmap, Nessus, OpenVAS, Metasploit and Kali Linux
Review penetration testing reports and map findings to security monitoring and response use cases
Support Red Team and adversary simulation activities
Requirements
Bachelor’s degree in Computer Science, Information Security, Cybersecurity or a related field
Lead proactive threat hunting operations across enterprise, cloud, identity, and operational technology environments to identify and disrupt advanced adversary activity.
Compensation
$116,255.00 - $151,132.50
Responsibilities
Lead proactive threat hunting operations across enterprise, cloud, identity, and operational technology environments
Analyze cyber threat intelligence, adversary TTPs, and emerging threat trends to assess risk and prioritize hunting efforts
Develop and execute hypothesis-driven threat hunts utilizing MITRE ATT&CK, Cyber Kill Chain, and intelligence-driven methodologies
Lead complex investigations involving advanced persistent threats, insider threats, ransomware, and targeted intrusion activity
Serve as a senior technical advisor during cyber incident response activities
Requirements
Bachelor's degree
Associates degree with 2 years relevant experience in system administration/help desk/security (cyber or physical)
High School Diploma/GED with 4 years relevant experience in IT system administration/help desk/security (cyber or physical)
Pre-sales - assist in qualifying sales leads from a technical standpoint.
Effectively carry out presales function in solution offerings (proposal, demo, presentation, etc.).
Lead all technical aspects of a sales cycle with the customer, from the initial RFIs, through to RFPs & RFQs when required.
Actively participate in preparing tender documents and proposals, RFPs, RFIs and POC demo.
Sales calls - be the main technical resource on sales calls and answer/ educate the customer on issues ranging from features, specifications and functionality to integration.