Sr. Information Security Analyst

Who We Are:

As a leading global investment management firm, AB fosters diverse perspectives and embraces innovation to help our clients navigate the uncertainty of capital markets. Through high-quality research and diversified investment services, we serve institutions, individuals, and private wealth clients in major markets worldwide. Our ambition is simple: to be our clients’ most valued asset-management partner.

With over 4,400 employees across 51 locations in 25 countries, our people are our advantage. We foster a culture of intellectual curiosity and collaboration to create an environment where everyone can thrive and do their best work. Whether you're producing thought-provoking research, identifying compelling investment opportunities, infusing new technologies into our business, or providing thoughtful advice to clients, we’re looking for unique voices to help lead us forward. If you’re ready to challenge your limits and build your future, join us.

Who You'll Work For:

The Information Security Analyst team is responsible for safeguarding AllianceBernstein’s technology and information assets. The team’s primary focus is on identifying threats, monitoring, and responding to security events and enhancing the firm’s security posture. The Information Security Analyst team operates as part of Infrastructure Risk Management (IRM), a department within Global Technology and Operations that is responsible for an enterprise-wide integrated infrastructure risk management program which employs a holistic approach to manage cybersecurity, information security, data privacy, physical security and business continuity led by the Chief Security Officer.

What You'll Do:

We are seeking a Nashville-based Senior Information Security Analyst to join our information security analyst team. This individual will act as part of the team responsible for “front line defense” by performing threat hunting services and ensuring that security alerts are reviewed, remediated, or escalated with appropriate urgency and all response actions are documented accurately. This is a fundamental practical role in protecting the information assets of the organization by effectively identifying and responding to potential indicators of compromise or attack.

The Senior Information Security Analyst will act as both a senior analyst and a non-managerial leader within the Information Security Analyst team, providing guidance and training to other information security analysts, and collaboration with other corporate business units including but not limited to global enterprise technology, corporate compliance, security assurance, global security operations, and other infrastructure risk business units. This position is part of a team that provides information security analysis services, incident response services, and ultimately information risk management support to the business. Specifically, this team acts as an incident response team and control group to ensure that security operational procedures are performed, and risks are addressed in a timely manner.

Describe the applications and business or enterprise functions the role supports:

Senior Information Security Analysts act as an information security subject matter expert (“SME”), as well as a SME on the various applications and tools the group utilizes such as Microsoft Defender for Endpoint/Identity/Office, Splunk, VMRay, and security incident tracking applications.

The key job responsibilities include, but are not limited to:

• Monitor alerts, detections or other indicators of compromise/attack from a variety of information security solutions;

• Performing threat hunting by actively seeking out anomalies and Indicators of Compromise and/or verifying their presence in the AB’s Information Technology Environment;

• Performing Incident Response activities based on automated alerts, malware assessment, IOC discovery and other threat hunting activities;

• Investigate, contain, eradicate, and/or escalate security detections as appropriate;

• Document and generate reports of detections and response actions for review by management and other stakeholders;

• Assist in the discovery, analysis, and remediation of vulnerabilities;

• Monitor security platforms’ health for errors, misconfigurations or performance alerts;

• Leverage SIEM platform by creating and executing search queries, dashboards, and alerts to identify threats, indicators of compromise, and assist in investigations;

• Support fellow team members, end-users, and other stakeholders’ requests related to information security services;

• Perform control testing and other risk management activities;

• Provide information in response to assessments and audits;

• Provide