Senior Security Operations Analyst

<p><b><span>CoinDesk is the most trusted media, events, indices and data company for the global crypto economy. Since 2013, CoinDesk Media has led the story of the future of money and investing, illuminating the transformation in society and culture that comes with it. Our award-winning team of journalists delivers news and unparalleled insights that bring transparency, comprehension and context. CoinDesk Events gathers the global crypto, blockchain and Web3 communities at annual events such as Consensus, the world’s largest and longest-running crypto festival. CoinDesk Indices offers expertise in digital asset indices, data and research to educate and empower investors. For more information on CoinDesk media and events, please visit<span> </span></span><a href="https://urldefense.com/v3/__http://coindesk.com__;!!PKfFmjksEw!2TSQq3dLb5GNoSOmf7Ydsps7HUveuUD_kYQMOoOGpCNOAgHiewyKqrZTMXBuMJF44wb__0tGEe9xSYim$" rel="noopener noreferrer" target="_blank">http://coindesk.com [coindesk.com]</a><span><span> </span>and for breaking headlines, data and indices visit<span> </span></span><a href="https://urldefense.com/v3/__http://coindeskmarkets.com__;!!PKfFmjksEw!2TSQq3dLb5GNoSOmf7Ydsps7HUveuUD_kYQMOoOGpCNOAgHiewyKqrZTMXBuMJF44wb__0tGER8NlCr7$" rel="noopener noreferrer" target="_blank"><span><span><span>http://coindeskmarkets.com</span></span></span> <span><span><span>[coindeskmarkets.com]</span></span></span></a> </b></p><p></p><p><b>In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. For more information on Bullish, please visit <a href="http://bullish.com" rel="noopener noreferrer" target="_blank">https://bullish.com</a> . CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence.</b></p><p></p><p></p><p></p><p><b>Reports to:</b></p>Information Security Manager, Security Operations &amp; Incident Response<p></p><p></p><p><span>We are seeking a </span>Senior<span> </span>Security Operations Analyst <span>to join our global security operations and incident response team. In this highly critical role, you will be responsible for monitoring and analyzing security incidents, responding to threats in real-time, and ensuring the integrity of our systems and platforms. Your expertise will help identify vulnerabilities and enhance our security posture through proactive measures and collaboration with cross-functional teams. This position requires a keen analytical mindset, a strong understanding of security technologies, and the ability to thrive in a fast-paced environment. </span></p><p></p><p></p><p><b>Role &amp; Responsibilities</b></p><ul><li><p><span>Work closely with the SOC Manager across daily activities of the Security Operations Center (SOC) to ensure Service Level Objectives are achieved. </span></p></li><li><p><span>Continuously monitor security alerts and incidents using SIEM tools and other security technologies.</span></p></li><li><p><span>Create detection use cases in the SIEM, analyze security event data for proactive threat hunting, and conduct research on the latest threats and vulnerabilities to enhance incident response readiness and capabilities.</span></p></li><li><p><span>Respond to security incidents, performing initial analysis and escalation as necessary.</span></p></li><li><p><span>Participate in incident response planning and execution, ensuring timely containment and remediation of security breaches.</span></p></li><li><p><span>Research and analyze emerging threats and vulnerabilities to adapt security measures accordingly.</span></p></li><li><p><span>Document security incidents, identify gaps from incidents and recommend improvements, develop and maintain incident response plans and SOPs.</span></p></li><li><p><span>Prepare detailed reports for stakeholders on security incidents and trends.</span></p></li><li><p><span>Work closely with cross functional technical teams to ensure the security of systems and data.</span></p></li><li><p><span>Participating in the on-call rotation for after-hours coverage, which include responding to security incidents, performing containment and forensic investigations</span></p></li></ul><p></p><p></p><p><b>Experience &amp; Qualifications</b></p><ul><li><p><span>BS/BA degree in Cyber Security/Computer Science or equivalent combination of related work experience desired.</span></p></li><li><p><span>CISSP, CISM, GCIA, GCIH, GCFE, GCFA, GREM, Splunk Power User and/or similar certifications is preferred</span></p></li><li><p><span>Verifiable experience in Security Operations and Incident Response.</span></p></li><li><p><span>Experience in performing analysis with SIEM technologies such as Splunk and/or Google Chronicle.</span></p></li><li><p><span>Experience in performing proactive and reactive threat hunting using MITRE ATT&amp;CK or similar frameworks.</span></p></li><li><p><span>In-depth understanding and working knowledge of security appliances/t