7+ years of experience in Cybersecurity within a SOC environment.
Proven background in Security Operations Center and Engineering roles.
Familiarity with threat intelligence and vulnerabilities.
Experience investigating phishing and email-related attacks.
Proficient in Windows and Linux environments.
Understanding of system and network security principles.
Knowledge of Networking protocols like TCP/IP.
Ability to communicate effectively with both technical and non-technical audiences.
Familiarity with the Cyber Kill Chain and MITRE/ATT&CK Framework.
Strong organizational skills for managing workloads and deadlines.
Excellent written and verbal communication skills.
Self-motivated with a desire to learn and grow.
Bachelor's degree in a technical field or equivalent experience.
Experience with SIEM, SOAR, and Cloud Security platforms.
Scripting experience in Python or similar languages.
Experience in risk assessments and penetration testing.
Responsibilities
Triage escalated cyber alerts and coordinate with internal stakeholders.
Investigate cybersecurity threats across email, host, and network.
Serve as a point of contact for employees reporting cybersecurity issues.
Identify opportunities to enhance detection capabilities and minimize false positives.
Coordinate with system and application owners to address cyber threats.
Develop and implement Security Orchestration & Automation processes.
Create, update, and publish Standard Operating Procedures and Cybersecurity playbooks.
Benefits
Competitive compensation package.
Generous 401K employer match.
Employee Stock Purchase plan with employer matching.
Generous Paid Time Off.
Comprehensive benefits focused on family wellness, including physical, mental, and financial health.
Support for career development through tuition reimbursement and professional training.
Dynamic and engaging work environment.
Opportunities for community involvement and corporate giving programs.
Full Job Description
Job Description
The Crum & Forster Cyber & Information Security team is seeking a Senior Cybersecurity Enginer/Analyst with the Threat Detection and Response team. Reporting to the Threat Detection & Response Director, this role will be responsible for partnering with our Managed Services SOC to ensure efficient and effective capabilities in identifying malicious activity, investigating escalated alerts to closure, and facilitating Incident Response duties. You will work with a team of professional Security Analysts leveraging Next-Gen security tools to help detect and remediate cyber threats.
What you will do:
Triage escalated Cyber alerts and coordination with internal stakeholders via ticketing.
Investigate email, host, and network-based cybersecurity threats.
Act as a point of contact for company employees reporting cybersecurity concerns.
Identify and recommend opportunities to refine detection capabilities and reduce False Positives.
Coordinate with various system and application owners to verify and remediate cyber threats.
Develop and implement Security Orchestration & Automation.
Develop, Update, and Publish Standard Operating Procedures.
Adhere to, update, and maintain Cybersecurity playbooks.
What you will bring to C&F:
7+ years Cybersecurity related experience in a SOC.
Previous experience working in a Security Operations Center and Engineering roles.
Understanding and maintaining familiarity with threat Intelligence news and Vulnerabilities.
Experience investigating phishing and email related attacks.
Experience with Windows and Linux.
Fundamental understanding of system and network security principles and technology.
Fundamental understanding of Networking - TCP/IP and other protocols.
Ability to interface with a wide audience of technical and non-technical personnel.
Understanding of the Cyber Kill Chain and MITRE/ATT&CK Framework.
Ability to prioritize and manage workloads and deadlines on a tactical and project-oriented level.
Excellent written and verbal communication skills.
Self-starter who is motivated and driven to learn.
Bachelor's degree in a technical discipline or equivalent experience.
Experience, knowledge and improvements of SIEM, SOAR, Email Security, Cloud Security platforms.
Experience with scripting automation in Python or other languages.
Experience in SIEM, IDS/IPS, Firewalls, Endpoint Detection/Response and Email Security
Experience performing risk assessments, penetration testing and tabletop exercises.
Any Security focused Certifications.
Experience in protecting, investigating and responding to Cloud Security
Technical writing experience.
Prior experience and/or certifications in AWS, Azure, and/or GCP is desired but not required.
Experience performing risk assessments, penetration testing and tabletop exercises is desired but not required.
Any Security focused Certifications is desired but not required.
#LI-MS
#LI-REMOTE
What C&F will bring to you
Competitive compensation package
Generous 401K employer match
Employee Stock Purchase plan with employer matching
Generous Paid Time Off
Excellent benefits that go beyond health, dental & vision. Our programs are focused on your whole family's wellness, including your physical, mental and financial wellbeing
A core C&F tenet is supporting your career development, so we provide a wealth of ways for you to keep learning, which may include tuition reimbursement, industry-related certifications and professional training to keep you progressing on your chosen path
A dynamic, ambitious, fun and exciting work environment
We believe you do well by doing good and want to encourage a spirit of social and community responsibility, matching donation program, volunteer opportunities, and an employee-driven corporate giving program that lets you participate and support your community
