Cybersecurity Senior Defense Analyst

JOB SUMMARY: 

The Cybersecurity Senior Defense Analyst will report to the Manager, Information Security at Securitas. As a member of the Cybersecurity team, the position will actively contribute to the maturation of the company's cybersecurity strategy and programs based on key processes, practices, and standards necessary to manage the risks and cybersecurity controls for the Securitas lines of business. The role is responsible for support efforts to protect the organization’s digital infrastructure from cyber threats. This role involves analyzing and responding to complex security incidents, managing advanced security tools, and developing strategies to mitigate risks. The Senior Analyst will also work closely with cross-functional teams to ensure the organization's security posture remains robust and up to date with evolving threats.

 

ESSENTIAL FUNCTIONS:

• The functions listed describe the business purpose of this job or position.  Specific duties or tasks may vary and be documented separately.  An associate might or might not be required to perform all functions listed. Additional duties may be assigned, and functions may be modified, according to business necessity.

• All assigned duties or tasks are deemed to be part of the essential functions, unless such duties or tasks are unrelated to the functions listed, in which case they are deemed to be other (non-essential) functions.

• Associates are held accountable for successful job performance.  Job performance standards may be documented separately, and may include functions, objectives, duties or tasks not specifically listed herein.

• In performing functions, duties or tasks, associates are required to know and follow safe work practices, and to be aware of company policies and procedures related to job safety, including safety rules and regulations.  Associates are required to notify superiors upon becoming aware of unsafe working conditions.

• All functions, duties or tasks are to be carried out in an honest, ethical and professional manner, and to be performed in conformance with applicable company policies and procedures.  In the event of uncertainty or lack of knowledge of company policies and procedures, associates are required to request clarification or explanations from superiors or authorized company representatives.

 

Scope of Responsibilities (Essential Functions) 

• Monitor and analyze security alerts from a variety of detection systems, including SIEM (Security Information and Event Management) tools and in conjunction with the MSSP/SOC service provider. 

• Lead incident response efforts, conducting root cause analysis, containment, eradication, and recovery activities. 

• Execute incident response playbooks. 

• Tune the alarms to minimize the false positives.

• Prepare detailed reports on security incidents, trends, and recommendations for improvements. 

• Identify the gap in detection coverage and manage the remediation plan. 

• Develop and implement advanced detection techniques to identify potential threats, vulnerabilities, or attacks. 

• Operational support for the overall risk management program. 

• Measure and act on critical metrics with a focus on continuous improvement to align with risk management framework. 

• Coordinate the resolution of cybersecurity risks by working with business and IT owners. 

• Maintain thorough documentation of incidents, investigations, and outcomes. 

 

Additional Responsibilities 

• Provide executive summaries and briefings for senior management on the organization’s security posture. 

• Oversee day-to-day security operations and guide junior analysts in managing security tools and responding to incidents. 

• Perform regular threat hunting activities to proactively discover threats within the organization. 

• Ensure compliance with Securitas security policies and procedures. 

• Function as a liaison between security teams and other departments to promote security awareness and best practices. 

• Mentor junior analysts and provide guidance on advanced security topics and tools. 

• Conduct internal training sessions on emerging threats and mitigation strategies. 

• Identify gaps in operational procedures and documentation & aid to close them. 

• Consult and facilitate with Securitas stakeholders on cybersecurity matters including projects and with compliance to policy, procedures, standards, and additional guidelines. 

• Keeps abreast of the latest cybersecurity, privacy, and regulatory concerns and best practices. 

 

MINIMUM QUALIFICATIONS AT ENTRY:

Additional qualifications may be specified and receive preference, depending upon the nature of the position.