Cyber Security Analyst II

Our Fortune 500 company is driving a digital transformation and looking for forward-thinking innovators to disrupt how our industry thinks about and uses technology. As one of the world's leading employee benefits providers, we help millions of people gain affordable access to benefits that help them protect their families, their finances and their futures.

Are you an asker of questions, a solver of problems, and a challenger of the status quo? Our mission is to provide a differentiated customer experience and exceed the expectations people have of technology at any company — not just insurers. 

We are seeking individuals to join our team of talented IT professionals who share never-ending passion and an unwavering focus on our customer experience. Team members comfortable working in an agile, fast-paced, and delivery-focused environment thrive in our environment where we value an entrepreneurial spirit and those who challenge the status-quo.

Unum is changing, and we’re excited about what’s next. Join us.

General Summary:

As a Security Analyst II, you’ll play a key role in our frontline defense, helping to monitor, investigate, and respond to security threats. Your responsibilities will include:
• Security Monitoring & Response: Triage, investigate, and respond to alerts from tools like our SIEM platform.
• Threat Analysis: Examine phishing attempts and other suspicious activities.
• Ticket Management: Handle incoming security-related tickets and ensure timely resolution.
• Continuous Improvement: Contribute to rule creation, tool enhancements, and automation initiatives.
• Collaboration: Work closely with team members and other departments to strengthen our security posture.
• Mentor and assist the team and those more junior in their analysis.
• Take a lead and be responsible for functions and projects in the team.

Job Specifications

• Bachelors or advanced degree in computer science, or comparable work experience
• Has 4+ years of related work experience in information technology engineering, support or consulting. It’s preferred if two of those years were spent in networking, application development, system security or IT audit related positions.
• A collaborative team player who shares ideas and supports others.
• Curious and enthusiastic about cybersecurity and continuous learning. E.g. Blog Posts, CTF participation, Tool Creation etc
• Strong communication skills, including the ability to present to senior stakeholders.
• Critical thinker and creative problem solver.
• Self-starter with the ability to manage a project.
• Comfortable at mentoring and guiding the team.

Technical Skills

• Solid understanding of networking and OS fundamentals, including ports, protocols, and their potential misuse.
• Experience using SIEM platforms for complex searches, aggregation, and visualization. (Crowdstrike/Splunk etc).
• Detection Rule creation and tuning.
• Logical and methodical approach to security analysis and threat hunting.
• Solid awareness of a variety modern threats, malware families, and threat actor tactics as well as being able to recognise them.
• Good understanding of various industry frameworks such as Mitre ATT&CK.
• Ability to interpret dynamic sandbox reports and assess risk.
• Ability to conduct static analysis of scripts and malicious documents, as well as some level of PE analysis.
• Competent at scripting and using a variety of methods to solve problems.
• Comfortable using version control tools like Git.
• Strong understanding of a variety of endpoint artifacts (e.g., Event IDs, registry keys) and their implications.
• Some experience using forensics tools such as Volatility.
• Knowledge of compliance frameworks and associated obligations.

Principal Duties and Responsibilities

• Partners with security engineers to evaluate vendor product strategies and future roadmaps, advising on the most appropriate solutions for adoption.

• Participates in the implementation and maintenance of security policies, procedures, and standards across areas such as endpoint protection, data loss prevention, IAM, cloud security, certificate/key management, and non-functional security requirements.

• Contributes to security projects and program development, supporting all phases as assigned.

• Consults with business partners on secure integration and configuration of new and existing software solutions.

• Supports evaluation and rollout of vendor technologies aligned with the corporate security roadmap.

• Provides support for security t