Senior Cyber Analyst
Posted 5hrs ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Cyber Analyst leading incident response, threat hunting, and SIEM detection engineering at global confectionery company Hershey. Owning detection governance and cyber defense improvements.
Responsibilities:
- Lead cybersecurity incident response across triage, investigation, scoping, containment, eradication, recovery, stakeholder communication, and lessons learned
- Maintain incident-response readiness through plans, playbooks, and exercises
- Own the SIEM content program, including strategy, roadmap, engineering standards, lifecycle governance, and metrics
- Design, build, validate, tune, and maintain detections mapped to attacker techniques
- Use threat intelligence, incident lessons, risk priorities, and telemetry to drive detections
- Provide technical direction and quality oversight to contracted MSSP content-development resources
- Promote knowledge transfer to internal team members
- Analyze endpoint, identity, cloud, network, and event-log telemetry
- Support threat hunting, threat intelligence, and security monitoring
- Partner with platform engineering to improve data quality and coverage
- Collaborate with technology, business, legal, privacy, and risk teams
- Participate in the on-call rotation for high-severity incidents outside normal business hours
Requirements:
- Bachelor’s degree in cybersecurity, information security, computer science, information technology, or a related field, or an equivalent combination of education and relevant professional experience
- 3 or more years of relevant cybersecurity experience
- Substantial hands-on experience in cybersecurity incident response and incident lifecycle leadership
- Experience in SIEM detection-content engineering
- Experience in threat hunting and security telemetry analysis
- Experience analyzing endpoint, identity, cloud, network, and event-log data
- Experience with digital forensics or advanced technical investigations
- Experience with technical program leadership, standards development, or lifecycle governance
- Experience establishing technical direction, influencing cross-functional partners, communicating during high-pressure incidents, and coaching employees or contracted technical resources is strongly preferred
- Experience with CrowdStrike Query Language (CQL), CrowdStrike NextGen SIEM (LogScale), or similar SIEM platform preferred
- Experience designing, testing, tuning, and maintaining SIEM detection content preferred
- Knowledge of attacker tactics, techniques, and procedures and their application to detection engineering preferred
- Experience with digital forensics, threat hunting, threat intelligence, or exposure management preferred
- Experience leading or providing technical oversight to MSSP or contracted security resources preferred
- Understanding of detection coverage, alert quality, content-health, and response-effectiveness metrics preferred
- Relevant SANS/industry certifications preferred
Benefits:
- Medical, dental, and vision coverage beginning on Day 1
- Wellness programs supporting physical and mental health
- Annual incentive opportunities
- 401(k) with company match
- Paid time off
- Company holidays
- Flexible ways of working where applicable
- Career development programs
- Learning opportunities
- Internal mobility
- Comprehensive benefits package supporting physical, mental, and financial well-being



















