IT Security Operations Analyst II

StoneX Group - West Des Moines, IA

Full-time - Mid Level

West Des Moines, IA

1,001-5,000 employees

Securities, Commodity Contracts, and Other Financial Investments and Related Activities

About the position

The IT Security Operations Analyst II position at StoneX Group is a critical role within the Security Operations team, responsible for safeguarding the organization against cyber threats. This position involves investigating security incidents, participating in incident response, and enhancing security processes and procedures. The analyst will work closely with various technologies to analyze and triage security alerts, ensuring that any suspicious activities are promptly addressed. The role requires a proactive approach to identifying and reacting to threats, with the goal of minimizing their impact on the organization. As part of the responsibilities, the analyst will lead and participate in security incident response efforts, which include identifying, containing, eradicating, and recovering from security incidents. The position also involves documenting security processes and incident reports, as well as integrating threat intelligence data into security operations to defend against emerging threats. The analyst will utilize a Security Orchestration, Automation, and Response (SOAR) platform to automate incident response processes, thereby improving efficiency and effectiveness in handling security incidents. The ideal candidate will possess strong analytical skills, a self-motivated attitude, and the ability to work in a fast-paced, competitive environment. They should be comfortable making decisions in time-sensitive situations and have a solid understanding of cybersecurity principles and practices. Communication skills are essential, as the analyst will need to document findings and collaborate with various teams across the organization.

Responsibilities

• Analyze and triage security alerts, investigating any suspicious activity with various technologies and taking appropriate action.
• Investigate security incidents to determine their cause, scope, and impact, and provide actionable recommendations for remediation.
• Lead and participate in security incident response by contributing to identifying, containing, eradicating, and completing appropriate recovery.
• Properly escalate and categorize security alerts and incidents, especially with MITRE ATT&CK.
• Participate in tuning efforts by providing feedback and engaging with the appropriate teams of alert sources.
• Utilize and automate incident response in a security orchestration, automation, and response (SOAR) platform.
• Integrate threat intelligence data into security operations to proactively defend against emerging threats by threat hunting and investigation enrichment.
• Document security processes and procedures as well as incident reports.

Requirements

• Bachelor's degree in Cyber Security or a related field, or equivalent experience.
• 3+ years of experience in information technology with a focus on incident response or similar experiences.
• Certifications such as GSEC, GCIH, GCFE, CISSP, CySA+, or equivalent skills.
• Strong experience working in a competitive, fast-paced, highly technical environment, ideally in the Financial Services Industry.
• Familiarity with the MITRE ATT&CK framework.
• Experience with security orchestration, automation, and response (SOAR) platforms.
• Experience with scripting and automation (e.g., Python, PowerShell).
• Demonstrated team-oriented interpersonal skills; ability to effectively interface with a broad range of people and roles across the business.

Nice-to-haves

• Experience in using a variety of information technology security tools and technologies.