About Us

Wellington Management offers comprehensive investment management capabilities that span nearly all segments of the global capital markets. Our investment solutions, tailored to the unique return and risk objectives of institutional clients in more than 60 countries, draw on a robust body of proprietary research and a collaborative culture that encourages independent thought and healthy debate. As a private partnership, we believe our ownership structure fosters a long-term view that aligns our perspectives with those of our clients.

We are transitioning to a hybrid work environment where both remote work and the office play a critical role. Our vision is a future where all employees are empowered to work flexibly to drive the best outcomes for our clients. Flexible work is a mindset and a core value. Our employees are encouraged to work remotely two days a week as a standard practice and will have flexibility in terms of working hours. 

About the Role

At Wellington Management our appetite for technology is insatiable.  We recognize that the world is full of fascinating questions that will impact the future of companies, economies, financial markets, and entire industries. We want you to help us find answers to these questions by building and evolving our innovative, industry leading, technology platform. We are seeking qualified candidates to join our expanding technology team. Together, you will not only dream up solutions to today’s investment challenges, but you will build them to see real-life results.  Technology needs are advancing, and this level of complexity requires a highly sophisticated well-managed technology platform that is built by people like you. This is your chance to build something incredible. We want you to think big, to solve challenges, and positively impact our clients.

JOB OVERVIEW

Our Cyber Defense Team’s primary mission is to understand ‘the normal’ and to continuously seek out and investigate the abnormal.  As a Lead Systems Analyst, you will work closely with our business and technology teams to qualify and respond to threats to understand and refine processes and controls. You will play a crucial role in identifying and mitigating threats, while actively contributing to the growth and development of our program. Your responsibilities will include both building and responding to alerts, triaging alerts, and investigating cybersecurity incidents, and helping to build future functions of the team, such as enhanced monitoring programs and breach attack simulation efforts. This role requires someone who can bring their expertise and innovative solutions to our dedicated global team and who has the technical and interpersonal skills to both independently lead investigations and help design and implement improved controls and processes.  Someone with an investigative mindset who is passionate about finding and stopping cyber threats. In this fast-paced and constantly evolving cybersecurity landscape, you will play a crucial role in combatting past, present, and future threats while also working directly with our technology and business partners to build an increasingly cyber resilient workforce.  We are a passionate global team dedicated to helping keep our clients and our firm safe.

RESPONSIBILITIES

• Maintain a core competency in event analysis and serve as an escalation point for noteworthy investigations, deeper investigations, and those that require critical attention.
• Continue to build out new capabilities within the program aligned with our attack surface.
• Opportunities include detection enhancements, improved or new standard operating procedures, and working with internal teams to tune and operationalize new technologies.
• Focus on continuing to develop dashboards, direct alerting, risk-based alerting, reports, and other objects as needed in Splunk.
• Continue to maintain a depth of knowledge within the cyber security field; entails following threat actor activity targeting the industry and speaking knowledgeably at regular threat intelligence briefings.
• Leveraging threat intelligence, experience, and other inputs to perform active threat hunting.
• Work alongside the Threat and Vulnerability Management Team to build response playbooks on emerging vulnerabilities.
• ·Interface with technical and non-technical users to conduct fact-finding interviews, gather forensic artifacts and understand business processes
• Engage with other teams as appropriate, either as a result of incident response, to build platform specific alerting, or to advocate for improvements to configurations or technologies.
• Continue to develop and improve the Cyber Incident Response Plan and advocate for the program.
• Participate in on-call rotation for escalated security events.