Job Classification:

Technology - Information Security

Are you interested in building capabilities that enable the organization with innovation, speed, agility, scalability, and efficiency? The Global Technology team takes great pride in our culture where digital transformation is built into our DNA! When you join our organization at Prudential, you’ll unlock an exciting and impactful career – all while growing your skills and advancing your profession at one of the world’s leading financial services institutions.

Your Team & Role

As a Cyber Security Operations Lead, you will partner with other security professionals across the Information Security Office, the Chief Technology Office, and other groups in Prudential to provide guidance and partner with analysts on various teams to develop integrations, correlations, processes, and SIEM content to better protect the environment.

In addition to the traditional SOC responsibilities of event analysis/management, you will have opportunities to provide feedback to improve the configuration of the tools/products used by the CSOC to better the defensive operations of Prudential as an organization. You will work on significant and unique issues where analysis of situations or data requires an evaluation of intangible variables and may impact future concepts, products, or technologies to ensure security of our products and customers! In addition to advanced technical/management expertise/experience, you will bring excellent problem solving, communication and teamwork skills, along with agile ways of working, strong business insight, an inclusive leadership attitude and a continuous learning focus to all that you do.

Here is What You Can Expect on a Typical Day

• Function as one of the shift Lead Analyst, acting as the reports to manager of the other analysts on the lead shift while reporting into the CSOC VP.
• Lead the day-to-day operations and serve as an escalation point for the team, while guiding and transferring knowledge to more junior team members.
• Leverage Security Operations and tool/process specific knowledge to resolve complex technical/process/people issues the team faces.
• Lead and plan knowledge sharing with Analysts while developing solutions/processes/detections efficiently.
• Conduct network, endpoint, and log analysis by using various consoles regularly (e.g., SIEM, IPS, firewall, EDR, Advanced malware detection etc.).
• Analyze potential security incidents to resolve impact/scope of the incident, leading the team through complex analysis and incident containment activities.
• Maintain the integrity and security of enterprise-wide cyber systems and networks by coordinating internal team and larger Prudential resources during triage/incident containment efforts.
• Partner closely with the Hunting, Threat Intelligence, and Detection Engineering teams to operationalize new use cases, detections, and intelligence.
• CSOC team provides 24x7x365 support and this role will be part of the Mid-shift (2-10pm EST)

Qualifications:

• Bachelor of Computer Science or Engineering, Information Security, Information Technology, or experience/degree in related fields.
• Ability to mentor others with minimal guidance and effectively leverage diverse ideas, experiences, thoughts, and perspectives to the benefit of the organization.
• Experience with agile methodology and Test-Driven Development (TDD).
• Knowledge of business concepts tools and processes that are needed for making sound decisions in the context of the company's business.
• Ability to learn new skills and knowledge on an ongoing basis through self-initiative and tackling challenges.

Advanced experience and/or expertise with several of the following:

• Direct background or experience with higher tiers of Cyber Security Operations, with direct exposure to Security tooling, having worked in a SOC like environment previously.
• Documentation/process experience, in IT or Cyber Security.
• Effective oral and written communication skills.
• Effective problem solving & analytical skills proven in an IT or security related area.
• Team player that can work with team members and businesses around the world in different time zones with a diverse cultural background while being supportive of local customs.
• Demonstrated passion about the information security field and cyber defense, including commitment to training, self-study, and maintaining proficiency in the technical cyber security domain.
• Demonstrated prior team leadership, preferably in a SOC/IR context.
• Innovative and willing to raise unique/original ideas.
• Knowledge of Splunk (ES) and Splunk certifications a huge plus.
• Exposure to/knowledge of other SIEM/SOAR tooling a plus.
• Demonstrated previous systems, cloud, endpoint, network, and server experience, prior administration of said tools/systems a plus.
• Familiarity with sandboxing solutions and malicious file analysis. Prior work with malware labs/sandboxes a plus.
• Prior exposure/experience with Cyber Threat Intelligence a plus.
• Deep understanding of IT Security practices/programs/tooling, with demonstrated examples of driving initiatives forwards.
• Automation experience a major plus, especially in a SOAR or SOC/IR context.

Preferred qualifications:

• IT Security certification beyond intro level certifications, (e.g., GCFA, GCIA, GNFA, GCTI, GREM, GCIH, GCFA, GPEN, OSCP, etc.).
• Cloud (AWS, Azure, GCP, etc.) Certs.
• Other Security Certifications beyond intro level.
• Scripting background (Python, PowerShell, bash, etc.).

Applied Experience with multiple of the Following:

• Cyber Security Operations Analysis and Management
• Digital Forensics
• Cyber Incident Response
• Threat Hunting and Adversary Emulation
• DFIR Automation and Engineering
• Cyber Threat Intelligence

You’ll Love Working Here Because You Can

Join a team and culture where your voice matters; where every day, your work transforms our experiences to make lives better. As you put your skills to use, we’ll help you make an even bigger impact with learning experiences that can grow your technical AND leadership capabilities. You’ll be surprised by what this rock-solid organization has in store for you.

Note: Prudential is required by state specific laws to include the salary range for this role when hiring a resident in applicable locations. The salary range for this role is from $125,000.00 to $186,100.00. Specific pricing for the role may vary within the above range based on many factors including geographic location, candidate experience, and skills. Roles may also be eligible for additional compensation and/or benefits. Eligibility to participate in a discretionary annual incentive program is subject to the rules governing the program, whereby an award, if any, depends on various factors including, without limitation, individual and organizational performance. In addition, employees are eligible for standard benefits package including paid time off, medical, dental and retirement.