Lead Analyst – Cyber Security Operations
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Lead Cyber Security Analyst protecting Hyatt’s global hospitality operations and guest data. Leading incident response, threat hunting, detection engineering and AI-assisted SOC operations.
Responsibilities:
- Respond swiftly to Cyber Security incidents, remove attackers from the environment and restore Hyatt operations with minimal disruption
- Lead incident response engagements for Cyber Security and Data Privacy incidents, including triage, containment, eradication, recovery, evidence preservation, post-incident reviews and corrective actions
- Analyze detections across endpoints, cloud, SaaS and AI as the subject matter expert
- Perform forensic analysis, timeline reconstruction, identify telemetry gaps and engineer detections
- Conduct AI-assisted investigations, enrichment, threat hunting and documentation
- Work with supervised security agents and semi-autonomous workflows
- Validate AI outputs and identify hallucinations or missing context
- Measure AI effectiveness through accuracy, traceability, escalation quality, action success and time savings
- Identify gaps in Hyatt’s detection pipeline and build new detections
- Conduct proactive threat hunting across Hyatt and Hyatt Franchise environments
- Serve as the senior-most technical resource for the SOC
- Prepare and present cyber defense program performance updates to senior leadership
- Review incident response performance and identify program improvements
- Serve as the escalation point for operations and security issues
- Work off-shift hours as needed during incidents and participate in an on-call rotation
- Lead and coordinate analysts, coach and mentor L1 and L2 Analysts
- Lead process-improvement initiatives and govern runbooks and playbooks
Requirements:
- Minimum of five years’ experience in Cyber Security Operations or Incident Response
- Extensive knowledge of Advanced Persistent Threats (APT) tactics, techniques and procedures
- Deep knowledge of TCP/IP and OSI network stack and its protocols
- Technical skills associated with Crowdstrike CQL, SPL, KQL, SQL, Python, PowerShell and SOAR
- Familiarity with Zero-Trust Network Access, FIDO 2.0, EDR/XDR, WSG, ESG, WAF, sandboxes, network- and host-based firewalls, Threat Intelligence and Penetration Testing
- Experience working in a high-intensity threat actor environment
- Experience preparing and presenting status updates for executive leadership
- Experience reviewing and updating Cyber Security Incident Response documentation and timeline reconstruction
- Knowledge of SaaS, cloud, information systems terminology, controls and practices
- Familiarity with threat hunting and adversary tactics and techniques, including MITRE ATT&CK and Cyber Kill Chain
- Familiarity with threat response frameworks, including SANS PICERL and NIST SP 800-61
- Familiarity with cyber and privacy regulatory requirements, including SEC cybersecurity disclosure rules, CCPA/CPRA and GDPR
- GIAC GCIH or equivalent GIAC, ISC2, ISACA, CompTIA or EC-Council certification
- Strong verbal, written communication and presentation skills
- Ability to work independently and as part of a larger team
- Ability to be on call for cyber incidents impacting the organization
- Ability to travel approximately 5% of work time
- Bachelor’s degree or better in Cyber Security, Information Systems or another security-related subject is preferred; equivalent combinations of education, experience and certification are acceptable
Benefits:
- Annual allotment of free hotel stays at Hyatt hotels globally
- Flexible work schedule
- Work-life benefits including wellbeing initiatives such as a complimentary Headspace subscription
- Discount at the on-site fitness center
- Global family assistance policy with paid time off following the birth or adoption of a child
- Financial assistance for adoption
- Paid Time Off
- Medical
- Dental
- Vision
- 401K with company match
Similar Jobs
Cybersecurity Analyst I
Remote Cybersecurity Analyst I monitoring alerts and investigating incidents for Farnell, a global technology products distributor. Supporting 24/7 SOC operations and incident response.
Security Analyst – Governance, Trust
Security Analyst maintaining customer security assurance content and AI-agent governance. Supporting Chainguard, a provider of hardened open-source software, in scaling trusted security operations.
Security Analyst – Governance, Trust
Security Analyst maintaining customer trust artifacts and AI governance workflows. Supporting Chainguard’s secure, production-ready open-source software supply chain.
Cyber Security Analyst
Cyber Security Analyst protecting World Business Lenders' real estate-secured business lending systems. Monitoring alerts, investigating incidents, and improving security controls remotely.
Senior Security Analyst, MDR
Senior Security Analyst joining Artemis's MDR service, Apollo, as a founding analyst. Investigating and responding to threats across customer cloud, identity, endpoint, and SaaS environments.
Identity & Access Management Analyst – IT Security
Remote IAM Analyst managing access controls, provisioning, PAM, MFA, and compliance for Guthrie’s integrated nonprofit healthcare organization.
Compliance & Security Analyst
Compliance analyst leading CMMC 2.0 and NIST 800-171 readiness for Logicalis clients. Authoring SSPs, managing remediation, and validating audit evidence.
Information Security Compliance Analyst
Information Security Compliance Analyst strengthening Data Recognition Corporation’s security compliance program. Managing GovRAMP, NIST RMF, SOC 2 audits, risk remediation, and business continuity initiatives.
Security Analyst – Penetration Testing
Analista de segurança conduzindo testes de intrusão e avaliações de vulnerabilidades para proteger clientes digitais da Stefanini Cyber. Atuando em ambientes web, mobile, cloud, AD e IoT/OT.
Security Analyst
Security Analyst managing vulnerability scanning and exposure programs for GuidePoint Security, a cybersecurity services provider. Advising customers and deploying vulnerability infrastructure across cloud and on-premise environments.
Senior Information Security Analyst
Analista sênior de segurança protegendo soluções digitais e serviços de TI da Hitss. Atuando com Microsoft Defender, firewalls, antivírus, proxy, SFTP e resposta a chamados.
Senior Security Analyst, MDR
Senior Security Analyst leading cloud, identity, endpoint, and SaaS investigations for Artemis's AI-driven defense platform. Shaping Apollo's managed detection and response service.
Security Analyst
Security Analyst protecting systems, data, and client information at Power Digital, an AI-native growth firm. Monitoring threats, managing vulnerabilities, and maintaining SOC 2 compliance.
Associate Security Analyst II
Security Analyst hunting threats across client environments for DirectDefense, a managed cybersecurity services provider. Monitoring SIEM/EDR systems and delivering actionable incident-response guidance.
Security Analyst I
Security Analyst I monitoring client environments, investigating threats, and supporting 24/7 incident response. Producing vulnerability reports and communicating findings to technical and executive audiences.
IT Security Analyst I – Evening Shift
IT Security Analyst monitoring security events and responding to incidents for VC3’s municipal and organizational IT clients. Investigating alerts, analyzing logs, and supporting threat hunting on an evening shift.
IT Security Analyst I
IT Security Analyst monitoring security events and responding to incidents for VC3, an IT services provider serving municipalities and organizations across the United States and Canada.
Cyber Security Analyst III – Digital Forensics, Incident Response
Cybersecurity analyst conducting digital forensics and incident response for the U.S. Department of Energy Hanford Site. Monitoring enterprise threats, investigating incidents, and supporting remediation.
Cybersecurity Analyst
Analista de Cyber Security protegendo soluções digitais da Click Cannabis para acesso responsável à cannabis medicinal. Condução de pentests, DevSecOps, segurança AWS e resposta a incidentes.
Principal Research Analyst – Information Security
Principal Research Analyst leading ISACA’s information security research, frameworks, and practitioner content. Representing the global technology association through thought leadership, events, and member guidance.