Senior Cyber Security Analyst (Information Technology)

There is a place for you at T. Rowe Price to grow, contribute, learn, and make a difference. ​ We are a premier asset manager focused on delivering global investment management excellence and retirement services that investors can rely on today and in the future. The work we do matters. We invite you to explore the opportunity to join us and grow your career with us.

Role Summary

The Senior Cyber Security Analyst for Incident Response will work in an environment where challenging technical and security issues in a dynamic operational environment will test knowledge, skills and abilities as they relate to incident response, forensics and cyber threat hunting. The Senior Cyber Security Analyst for Incident Response will: use data collected from cyber defense tools to analyze events for the purposes of finding and mitigating threats; Investigate, analyze, and respond to cyber incidents; Evaluate security controls against the current threat landscape and organizational architecture and provide recommendations for enhancement ; Cultivate an active partnership with Enterprise Architecture, Technology Platform and Application Owners as they are accountable for the secure design, configuration, and operation of their environments.

Responsibilities

• Accountable for all aspects of the cyber security analysis process for their work

• You will contribute to the development of and improvement in cyber security standard methodologies within your group

• Leads analysis and actively participates in providing feedback on team members' work

• Ability to lead a team on cyber analysis or incident response

• Ability to break down complex or vague problems and steps through them in a rational way

• Flexible in his or her thinking; able to evolve a solution when additional information or ideas are presented

• Decisions and recommendations distinguish between near term mitigation and required future investments

• Identifies when junior resources need help and provides mentoring in a positive way that promotes confidence

• You will help team members/make suggestions to improve practices

• On-call rotation 1 week per month, with one weekend on call, every seven weeks

• Other duties as assigned

Business Knowledge

• Can articulate cyber security risk and translate into practical solutions to technology teams

• Thorough knowledge of the cyber analysis program associated objectives

Qualifications

Required:

• Typically, 4+ years of relevant experience

• Up to date with relevant cyber security threats and counter measures

• Shows a commitment to quality by implementing suitable solutions

• Leads work reviews and actively participates in providing feedback on others' work

• Performs as an expert in one or more cyber security programs.

• Hard drive forensics experience preferably using ENCASE

• Deep understanding of TCP/IP, OSI model and component and systems dependencies concepts.

• Deep understanding of incident response processes and procedures

• Utilizes Cyber Threat Intelligence and Cyber Security Awareness concepts to influence work

• In depth understanding of Windows operating systems and general knowledge of Unix, Linux, and Mac operating systems

• Knowledgeable with various security infrastructure tools such as firewalls, intrusion prevention/detection systems, proxy servers, email controls, anonymizing technology, and SIEM

• Knowledgeable in Cyber risk management frameworks knowledge, web application technologies, and network and systems forensics

• Ability to investigate and analyze malicious code

• Ability to work as part of a team, show initiative and take on new tasks as assigned

• Ability to perform risk analysis and communicate that risk to others

• General understanding of AWS, Azure and/or Google Cloud

Preferred:

• Experience in a 24x7 global enterprise, preferably in the Financial industry

• SANS GIAC certifications (such as GREM, GCIH, GCFA)

• In-depth knowledge of malware analysis tools

• Scripting experience, preferably Python and/or Powershell

• Splunk knowledge

• General system administration

FINRA Requirements

FINRA licenses are not required and will not be supported for this role.

Work Flexibility

This role is eligible for hybrid work, with up to three days per week from home.

Base Salary Ranges

Please review the job posting for the location of this specific opportunity.

$94,500.00 - $161,000.00 for the location of: Maryland, Colorado, Washington and remote workers
$103,000.00 - $177,000.00 for the location of: Washington, D.C.
$117,000.00 - $201,000.00 for the location of: New York, California

Placement within the range provided above is based on the individual's relevant experience and skills for the role.  Base salary is only one component of our total compensation package.  Employees may be eligible for a discretionary bonus, which is determined upon company and individual performance.

Commitment to Diversity, Equity, and Inclusion

We strive for equity, equality, and opportunity for all associates. When we embrace the power of diversity and create an environment where people can bring their authentic and best selves to work, our firm is stronger, and we create greater value for our clients. Our commitment and inclusive programming aim to lift the experience for each associate and builds allies for our global associate community. We know that a sense of belonging is key not only to your success at the firm, but also to your ability to bring your best each day.

Benefits

Our policies may change as our working lives evolve. Yet, our commitment to supporting our associates' well-being and addressing the needs of our clients, business, and communities is unwavering.

T. Rowe Price is an equal opportunity employer and values diversity of thought, gender, and race. We believe our continued success depends upon the equal treatment of all associates and applicants for employment without discrimination on the basis of race, religion, creed, color, national origin, sex, gender, age, mental or physical disability, marital status, sexual orientation, gender identity or expression, citizenship status, military or veteran status, pregnancy, or any other classification protected by country, federal, state, or local law.