Cybersecurity Threat Analyst II (SOC)

What you’ll discover

• Inclusive culture and career growth opportunities
• Global IT Organization which collaborates across U.S., Canada, Europe and Australia, click here to learn more
• Challenging, collaborative, and team-based environment

What you’ll do

The IT Security organisation bears the broad responsibilities of delivering information security, practice governance & assurance, and data loss prevention throughout the TJX enterprise. Our worldwide team applies expertise and deep business understanding to ensure confidence for all company associates, investors, and customers.

The Cybersecurity Threat Analyst II is an individual contributor role serving on a team of dedicated analysts in the Security Operations Centre (SOC), responsible for identifying and handling cyber security incidents, while gaining exposure to multiple technology platforms

Responsibilities:

• Triage and respond to alerts to reduce the likelihood of security impact to corporate assets
• Maintain and adhere to defined runbooks for daily tasks, suggesting process and documentation improvements
• Recommend preventative technology measures to reduce security risks
• Assist with incident response procedures, participating in playbook development and tabletop scenario exercises
• Suggest new monitoring and alerting use cases to expand visibility and coverage of the attack surface
• Interface with user community and assist with IT Security needs of business groups and stakeholders
• Maintain awareness of emerging threats, vulnerabilities, and attacks

What you’ll need

We seek creative, security-minded professionals to provide hands-on talent and social expertise in protecting TJX and its assets. You'll work with engineers, business programs, and other security professionals to adapt and improve our security posture in applications, infrastructure, and cloud modernization efforts.

• Experience working in a Security Operations Centre (SOC), with hands-on responsibility for responding to and managing security alerts
• Excellent aptitude for problem solving and strong written and verbal communication skills
• Fluent knowledge of tools and products used in daily tasks such as SIEM, anti-virus, firewalls, intrusion prevention, email security, and ticketing systems
• Great understanding of network concepts and protocols (such as DNS, DHCP, LDAP, SMTP, FTP, etc.)
• Demonstrated knowledge and understanding of information technology industry trends and emerging technologies and an ability to relate them to the company and its objectives
• Bachelor's Degree or equivalent experience
• Relevant industry certification is preferred (GCIA, GCIH, GREM, GCFA