Join TriumphX!

TriumphX, a member of the Triumph Financial portfolio of brands, provides a concentration of technology and project management resources the members of the Triumph Financial portfolio of brands – TriumphPay, Triumph and TBK Bank – via a shared service model. We’re looking for top tech and project management talent to analyze, recommend and build strategic solutions that support Triumph Financial’s mission to become a world-class, market-leading financial and technology company.

This is a pipeline requisition and not a job opening.  We are in the process of pipelining for anticipated future job openings.

As a Threat and Detection Analyst Lead, you will work with a team to help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and customer information. You will design, deploy, configure, and manage the Security information and event management, (SIEM) to ensure effective and efficient threat detection and incident response capabilities.

You will collaborate with internal stakeholders to identify and define SIEM use cases, threat detection rules, alerts, and correlation rules based on industry standards and best practices.  And you will monitor and analyze security events and logs to identify potential security incidents, intrusions, and vulnerabilities.

A Day in the Life:

• Investigate and respond to security alerts and initiate incident response procedures as required.

• Conduct advanced log analysis and perform forensic investigations to identify indicators of compromise (IOCs) and patterns of malicious activity.

• Develop and maintain incident response playbooks and procedures, and participate in incident response activities as needed.

• Conduct periodic reviews and assessments of SIEM configurations, rules, and processes to identify areas for improvement and optimization.

• Stay up to date with the latest industry trends, threat intelligence, and emerging technologies in the field of SIEM and threat detection.

• Provide guidance, training, and knowledge transfer to junior team members on detection engineering and SIEM best practices.

• Protects the confidentiality, integrity and availability of critical data, systems, and services

• Safeguard information system assets by identifying and solving potential and actual security and risk concerns

• Protects systems by defining role and attribute-based access privileges, control structures, and resources

• Categorizes risks and threats by identifying abnormalities and reporting violations

• Implements security improvements by assessing situation; evaluating trends; anticipating requirements

• Determines security violations and inefficiencies by conducting periodic audits

• Monitors, investigates, and responds to security alerts

• Upgrades cyber security program and capabilities by implementing and maintaining security controls

• Prepares performance and stability reports to communicate system status to users and management

• Performs other duties as required

To succeed in this role, we hope you bring:

• Bachelor’s degree in Information Security, Information Systems, Computer Science, or equivalent work experience

• SANS certification Preferred (GSEC, GCIH, GCFA, GDAT, GCDA)

• 5+ years experience in threat detection or threat hunting

• Certified Information Systems Security Professional (CISSP) Preferred

• Cloud analytic security tools

• CIS 2.0 security and NIST 800-53 framework controls

• FFIEC Cyber Assessment Tool (CAT)

• SOC I, SOX, GLBA, and FFIEC regulatory compliance

• Experience developing SIEM correlation rules.

• Experience creating EDR detection and exclusion rules.

• Familiarity with SOAR is a plus.

• Strong self-motivation and time management skills required.

• Excellent written and verbal communication skills required.

• Experience with Active Directory/Entra ID

• Experience with offensive security frameworks and tooling

• Experience with network security controls (e.g., firewalls, proxy, IPS/IDS)

• Understanding of Authentication and Authorization protocols

Some Additional Skills and Abilities that would be ideal to have:

• Ability to function with limited supervision and provides support to junior associates

• Strong interpersonal skills.

• Quality written and oral communication, and presentation skills.

• Critical