Ericsson Enterprise Wireless Solutions has an immediate opening for a Senior Security Operations Analyst on our Security Operations team, which is responsible for monitoring for, detecting, analyzing, and responding to cyber threats within our digital assets.  

As a Senior Security Operations Analyst, you will be expected to not only triage and investigate security alerts quickly and efficiently but also bring your experience, passion, growth mindset, critical thinking, and creativity to improve our security monitoring capabilities, mentor other security analysts, and respond to security incidents. You will have the opportunity to work cross-functionally with other business units to learn about our organization’s critical business processes and the systems that support them, becoming a student of the business and helping develop new solutions that improve our security posture.  

An ideal candidate is one that demonstrates a passion for cybersecurity with a particular strength in cloud security. Their role transcends themselves as they actively seek to teach and mentor others, sharing their knowledge to ensure the best possible outcomes. They will demonstrate a growth mindset, willing to step out of their comfort zone, make and learn from mistakes, speak up when others won’t, and lend a hand rather than point a finger. 

What Will You Do? 

• Security monitoring, alert triage, and incident response activities across complex environments, including on-call rotations for afterhours monitoring

• Utilize existing tools and processes to extend coverage, increase effectiveness, and expand security monitoring capabilities

• Support use security monitoring case development of detection engineering efforts

• Conduct technical investigations leveraging digital forensics knowledge and experience to identify root causes and detect lateral movement to adjacent resources

• Work with IT and business teams to develop solutions that address root causes

• Identify improvements in Security Operations procedures and participate in automation projects

• Monitor information technology and security feeds to keep up with the latest trends and emerging threats

• Conduct research into new threats, identifying and/or mapping IOC/TTPs, and proposing new security monitoring use cases

• Perform threat hunting based on security research and threat intelligence

• Share knowledge with and provide mentorship for less experienced team members

• Provide subject matter expertise on relevant issues to Security leadership.

• Deliver regular, timely reporting on security topics as required

• Work in shifts with efficient and accurate handover procedures

• Adhere to SLAs for security investigations
   

Qualifications

Minimum Qualifications:

• Strong networking and security skills 

• MITRE ATT&CK Framework 

• Threat hunting 

• Digital forensics 

• Strong knowledge in Cloud Security 

• Microsoft Azure: Sentinel, Defender, Entra ID, etc. 

• Amazon Web Services (AWS): Security Hub, Guard Duty, CloudTrail, etc.

• Google Cloud Platform (GCP): Chronicle, Security Command Centre, etc.

• Bachelor’s degree in information systems, cybersecurity, or a related field

• Additional years of relevant experience will be considered in lieu of a degree

• Past, demonstrable Security Operations experience, preferably in a SOC

• At least five (5) years of progressive experience in information technology or cybersecurity 

• Organization and project management skills 

• Ability to work at odd hours and work effectively under pressure 

• Flexibility and ability to work both in a team as well as individually 

• Strong communication and documentation skills 

• Ability to work across different cultures in a global setting and with many stakeholders 

• Growth mindset and positive attitude 

• Impeccable integrity and track record of working with sensitive information 

Preferred Qualifications:

• Security related certifications like GCIH, GCIA, GMON, GREM, CEH, CISSP, CHFI and Incident Response certification