Information Security Analyst

Responsibilities include

• Serve as a primary escalation point for security events
• Serve as an SME for event/incident detection and response
• Analyze and respond to security events found internally or via the firm's Managed Security Service Providers
• Review security context alerts and logs using the firm's security information event management platform (SIEM) or other tools
• Build dashboards and custom SIEM queries as need to facilitate detection, response and other use-cases.
• Serve as an initial point of contact for help desk tickets assigned to the Information Security Team
• Promptly respond to requests for assistance from end-users and others regarding incidents or security concerns at the firm
• Escalate security events/incidents according to defined workflow and in accordance with any relevant SLAs
• Thoroughly document the results of security event/incident investigations
• Adhere to relevant policies, procedures, standards and security good/accepted practices
• Resolve problems independently and understand escalation procedure
• Respond in a timely manner to all requests for access or other security exceptions requiring approval or involvement from the information security team
• Maintain current security certifications and attend industry seminars and relevant continuing education events
• Monitor and investigate security events involving artificial intelligence, machine learning, generative AI, and large language model technologies.
• Identify and investigate potential misuse of AI technologies, including unauthorized AI services, sensitive data exposure, prompt injection, malicious content generation, and AI-assisted social engineering.
• Develop and maintain detection queries, correlation rules, dashboards, and response procedures for AI-related threats and anomalous activity.

Qualifications

• Ability to relate to non-technical users in user-friendly language
• Ability to understand or learn the technical implications of security threats
• Ability to manage multiple concurrent objectives or activities, and effectively make judgments in prioritizing and time allocation in a high-pressure environment
• Ability to gauge one's strengths and limitations
• Ability to deal with changes and adapt to a changing environment
• Must demonstrate the ability to maintain strict confidentiality of the firm's internal and personnel affairs
• Ability to work well with others, harness different skills and experience, and build a strong sense of team spirit
• Highly self-motivated and directed
• Ability to work in a multi-office environment and willingness to travel to other offices as required
• Ability to work effectively in a culturally and educationally diverse environment
• Possess excellent troubleshooting, problem solving, and verbal/written communication skills
• Ability to manage critical situations, and maintain solid relationships with colleagues and firm staff and attorneys
• Ability to anticipate problems, communicate them, and resolve if appropriate
• Ability to work independently and as part of a team
• Must have strong written/verbal communication skills
• Must be detail oriented with strong customer service skills
• Requires strong interpersonal and organization skills
• Take ownership of issues and responsibility for customer satisfaction and overall success of services provided
• Interface with a variety of customers in a polite, positive, and professional manner
• Familiarity with AI security concepts such as prompt injection, data leakage, model manipulation, insecure integrations, excessive agency, and adversarial use of AI.
• Ability to communicate AI-related security risks and technical findings clearly to both technical and non-technical audiences.

Experience

• University degree in a technology related discipline or 3 years of relevant experience
• 5-7 years of experience in a dedicated information security analysis role
• 3-5 years of experience in information technology in an area such as; networking, desktop engineering, programming, systems administration, help desk
• Strong critical thinking and problem-solving skills
• Practical experience with TCP/IP networking
• Significant experience with the Windows operating system and event logs
• Significant experience with and expertise in security event detection, analysis and incident response tools
• Significant experience with and expertise in conducting security event analysis and incident response.
• Significant experience and expertise in using security information event management platforms (SIEM) for searching and correlating events including; building complex searches and correlation rules
• Strong knowledge of networking concepts including; DNS, switching, routing and firewalls
• Experience investigating security events involving cloud applications, APIs, automation platforms, or AI-enabled technologies.
• Experience developing or tuning detections for emerging threats, including AI-assisted phishing, impersonation, malware, credential attacks, and social engineering.
• Experience using AI-assisted capabilities within security technologies such as SIEM, endpoint detection and response, email security, threat intelligence, vulnerability management, or security orchestration platforms.
• Practical experience applying human oversight and validation to AI-generated security findings, recommendations, or automated actions.

Compensation & Benefits

• The annual compensation range for this position is $150-200k. The salary offered within this range will depend upon qualifications and other operational considerations.
• Benefits offered for this position include health care; retirement benefits; paid days off, including sick time, and vacation time; parental leave; basic life insurance; Flexible Spending Accounts; as well as discretionary, performance-based bonuses.
• For technical difficulties with our online application, please contact us at. Our recruiting support team will respond as soon as possible.
• Please note, this is a dedicated email inbox established exclusively to assist applicants with accommodation request related to the recruitment process. Inquiries about the status of an application or other non-accommodation matter will not receive a response.