Macquarie Group Limited | Cyber Threat Defense Analyst | Houston, TX | United States | BigDataKB.com | 17 Oct 2022

Join Macquarie’s Cyber Threat Incident Response (CTIR) team based in our Houston office as a Cyber Threat Defense Analyst. In this role, you will be working alongside a diverse team in multiple offices around the globe and be responsible for detecting, identifying, triaging, and mitigating threats and risks in our global cyber environment. You will also act to ensure that Macquarie’s digital estate is protected from threats both known and unknown.

Your first-class technical skills are required to continuously identify, assess, and manage threats relative to the corporate risk appetite by leveraging technology and your experience to analyze data. Experience in log aggregation and analysis will be crucial in detecting and triaging potential or active security incidents.

Your understanding of cyber threat as a function of human motivation, combined with your experience in actively detecting and defending against that threat utilizing a combination of standard cyber tools and your own system/platform/network knowledge, will be highly beneficial in this role alongside your similarly skilled and experienced peers.

As part of our global 24×7 defense methodology, this role provides coverage of weekend days (Saturday and Sunday) in-region. Analyst schedules will adjust to cover weekends once training has been completed and will be supported by senior on-call analysts.

Role- and level-specific training is provided along with ongoing and annual training for each analyst as part of the team development plan, understanding that actor methodologies are constantly advancing so our analysts must evolve to stay ahead of our adversaries.

To be successful in this role you must have a minimum of 1 to 2 years of related security experience in enterprise environments. A strong understanding of security technology and defense topologies are imperative to be successful in this role.

What is the job?

• Triage active alerts and campaigns for potential systemic threats to our global business
• Proactively seek out suspicious activity and threats within the environment, act appropriately to contain and mitigate them
• Perform real-time detection, analysis, and response to threats via an EDR tool
• Analyze attacks and trends facing the organization and industry to better define proactive defensive measures
• Track, provide, and present analysis into observed attacks against Macquarie
• Take proactive actions to have observed brand impersonating and malicious sites removed
• Review processes, defense plane, technologies, and alerts in search of improvement

What the ideal candidate should know/have experience with:

• Splunk or other large log aggregation system
• An Endpoint detection and response (EDR) platform
• Email gateway security controls
• Analyzing Emails (e.g reading and understanding email headers, infrastructure)
• Analytical mindset
• Offensive Security/Adversarial mindset
• Familiarity with various network or cloud architectures
• Identity and Access Management (IAM)
• User and Entity Behavior Analytics (UBA/UEBA)

About the Corporate Operations Group

The Corporate Operations Group brings together specialist support services in Digital Transformation & Data, Technology, Operations, Human Resources, Business Services, Corporate Strategy & Solutions, and the Macquarie Group Foundation. We deliver service excellence to ensure Macquarie is open for business, deliver on transformational change, invest in our people and have deep relationships with our customers.

Our COVID-19 policy

In line with local regulations, all Macquarie employees in New York are required to be fully vaccinated against COVID-19 and provide proof of full vaccination in order to attend the office and to participate in external meetings and business travel in New York City, unless a reasonable accommodation is approved or as otherwise required by law. Outside of New York, proof of vaccination is not required to attend a Macquarie office, travel for business, or attend an external business event.

Our commitment to Diversity, Equity and Inclusion

The diversity of our people is one of our greatest strengths. An inclusive and equitable workplace enables us to embrace that diversity to deliver more innovative and sustainable solutions for our people, clients, shareholders and communities. At Macquarie, you’ll be encouraged to be yourself and supported to perform at your best. If you’re inspired to deliver on our purpose of ‘empowering people to innovate and invest for a better future’, we want you on our team. If you need adjustments made to the recruitment process, please reach out to your recruiter.

All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, national origin, age, disability, protected veteran status, genetic information, marital status, gender identity or any other impermissible criterion or circumstance. Macquarie also takes affirmative action in support of its policy to hire and advance in employment of individuals who are minorities, women, protected veterans, and individuals with disabilities.

We equip our people with the support to work in a range of flexible ways. Talk to us about what working arrangements would help you thrive.