Senior System Analyst - Wellington Management Company, LLP

Wellington Management offers comprehensive investment management capabilities that span nearly all segments of the global capital markets. Our investment solutions, tailored to the unique return and risk objectives of institutional clients in more than 60 countries, draw on a robust body of proprietary research and a collaborative culture that encourages independent thought and healthy debate.

Wellington Management is seeking a Senior Cybersecurity Analyst; someone with an investigative mindset who is passionate about finding and stopping cyber threats. This role requires someone who can bring their expertise and innovative solutions to our dedicated global team and who has the technical and interpersonal skills to both independently lead investigations and help design and implement improved controls and processes.

Our Cyber Defense Team's primary mission is to understand 'the normal' and to continuously seek out and investigate the abnormal. As a Cyber Defense Team Senior Analyst, you will work closely with our business and technology teams to qualify and respond to threats to understand and refine processes and controls. Your responsibilities will include but are not limited to:

• Being an escalation point and expert on cyber incidents of various types.
• Threat hunting for TTPs prioritized by internal and external threat intelligence.
• Owning team process improvements as well as mentorship.
• Staying on top of industry technology and cyber threat advancements.

Responsibilities:

• Maintain a core competency in event analysis and serve as an escalation point for noteworthy investigations.
• Continue to build out new capabilities within the program aligned with our attack surface.
• Focus on continuing to develop dashboards, direct alerting, risk-based alerting, reports, and other objects as needed in Splunk.
• Maintain a depth of knowledge within the cyber security field.
• Leverage threat intelligence, experience, and other inputs to perform active threat hunting.
• Work alongside the Attack Surface Management Team to build response playbooks on emerging vulnerabilities.
• Interface with technical and non-technical users to conduct fact-finding interviews.
• Engage with other teams as appropriate to advocate for improvements to configurations or technologies.
• Continue to develop and improve the Cyber Incident Response Plan.
• Participate in on-call rotation for escalated security events.

Qualifications:

• Experience in having worked in a Security Operations, CSIRT, or similar role.
• Strong understanding of the fundamentals such as packet, file, and log analysis.
• Knowledgeable with various security infrastructure tools.
• Strong understanding of common communication protocols and networking fundamentals.
• Track record of mentorship and knowledge sharing to broader team members.

Preferred:

• Relevant recognized credentials (CISSP, CEH, GCIH, OSCP, or similar).
• Working knowledge of Amazon AWS services and secure configurations.
• Experience working with Microsoft cloud technologies (Azure Active Directory, Office 365, Defender 365).

If you believe that you could excel in this role, we encourage you to apply and welcome a chance to review your background. We are dedicated to building and maintaining a diversified workforce and considering a broad array of candidates with a variety of skill, workplace experiences, and backgrounds.