Conduct third-party technology risk assessments and due diligence by evaluating services, data flows, integrations, controls, and evidence. Identify and document risks, control gaps, vulnerabilities, and compliance issues; support risk ratings, remediation tracking, incident response, reporting, and metrics. Collaborate with technology, procurement, legal, compliance, audit, and globally distributed teams to implement governance practices and improve third-party risk processes.

Performs advanced malware analysis, extracts indicators of compromise, develops SOAR automations, and builds AI-enabled SOC capabilities. The role tunes detection and alerting logic, enhances threat hunting, mentors junior analysts, leads escalations, performs QA, and documents investigations. It requires extensive SOC experience, Python and SOAR expertise, off-hours escalation support, and advanced knowledge of attack techniques, operating systems, cloud environments, web vulnerabilities, authentication, networking, and packet analysis.

Senior SOC analyst performing advanced malware analysis, extracting IOCs, building SOAR automations, partnering with data science for AI capabilities, tuning detections and alerting, mentoring junior analysts, and ensuring QA and documentation.