Sr Analyst, Cyber Security Threat Management

Job Summary

As part of Northern Trust s security operations center, a Senior Analyst will conduct security monitoring, security incident identification, incident prioritization, incident escalation and directed response support functions. Tier one analyst will play a crucial role in executing Northern Trust s 24x7 security monitoring model, creating a resilient and unified team that improves NT s ability to protect and defend its networks and information.

Responsibilities

• Monitor and investigate alerts from SIEM, EDR/XDR, email, identity, network, and cloud security tools.
• Analyze security events to determine incident scope, severity, and business impact.
• Coordinate containment, remediation, escalation, and incident tracking through closure.
• Conduct threat hunting and identify opportunities to improve detections, runbooks, and playbooks.
• Maintain accurate investigation records and provide effective handovers across global SOC teams.
• Support major incidents, post-incident reviews, and operational reporting.
• Provide technical guidance and investigation support to junior analysts.
• Collaborate with regional and global cybersecurity, infrastructure, identity, cloud, and technology teams.

Qualifications

• Bachelor s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent experience.
• Practical knowledge of incident response processes, MITRE ATTCK, networking, and common cyberattack techniques.
• Experience with SIEM, EDR/XDR, IDS/IPS, email security, identity security, and ServiceNow.
• Experience with Microsoft Sentinel, Microsoft Defender XDR, KQL, threat intelligence, or security automation is preferred.
• Strong analytical, communication, documentation, and stakeholder-management skills.
• Ability to work independently within a shift-based, 24x7, or follow-the-sun operating model.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.