Lockton is a global professional services firm with more than 8,000 Associates who advise clients on protecting their people, property and reputations. Lockton has grown to become the world's largest privately held, independent insurance broker by helping clients achieve their business objectives. Check out the latest insights from Lockton's experts.
A few reasons Associates love working at Lockton include:
- Opportunities for growth and advancement, including paid training and professional development.
- 12-week paid parental leave.
- An emphasis on community involvement and giving back.
- Frequent athletic and wellness events.
- Incredibly generous rewards; US Associates receive a Rolex for their 10-year anniversary!
- We are uncommonly and perpetually independent.
Senior Cyber Security Analyst
- 8+ years of overall related experience with 5+ years of cybersecurity Incident Response experience, SOC experience
- Experience with SIEM platforms such as Splunk: writing searches, creating dashboards, and performing forensics
- Experience with Endpoint detection and prevention suites (Symantec, Splunk, CrowdStrike, etc.): performing forensics, securing devices, and collecting evidence
- Experience with security and incident tools within Azure
- Exceptional ability to conduct cybersecurity investigations, analyze and distill relevant findings and determine root cause
- Strong knowledge of security and web technologies such as SIEM, full packet capture, Firewall/NGFW, IDS/IPS, EDR, DLP, UEBA, networking protocols, Microsoft Windows and Linux/Unix platforms and tools with related experience in corporate infrastructures
- Excellent knowledge of industry-standard frameworks (such as MITRE ATT&CK)
- Strong technical experience and familiarity of various types and techniques of cyber-attacks, with the incident response and threat hunting lifecycles
- Experience in security aspects of multiple platforms, operating systems, software, communications, and network protocols
- Understanding of and experience with common Internet services/protocols, such as IP, TCP, UDP, HTTP, TLS, SMTP
- Excellent analytical ability, consultative and communication skills, strong judgment, and discretion in high pressure environments
- Strong verbal and written communication skills with ability to tailor message to various audiences (technical, operations, leadership, client)
- Must be highly skilled and proficient in problem solving, with an aptitude and willingness to learn new technologies
- Self-motivated with the ability to manage and prioritize multiple deliverables
- Bachelor’s degree, ideally in Computer Science, Security, Engineering, or a related field
- Industry recognized certifications like GCIH, CISSP, GCFA, GCFE is a plus
- Experience with scripting (PowerShell, bash, etc.) is a plus
- Experience with host-centric tools for forensic collection and analysis (Encase, FTK, etc.) is a plus
- Digital Forensics and Incident Response (DFIR) experience and certification is desirable. DFIR experience in cloud environments is a plus
- Understanding of APT, Cyber Crime and other associated tactics is a plus
- An interest in reverse engineering, red-teaming, penetration testing, and competing in Capture the Flag (CTF) events is a plus
- Open to remote locations
Lockton Companies LLC is proud to provide everyone an equal opportunity to grow and advance. We strive to cultivate an environment that learns from, celebrates, and thrives because of our breadth of differences. We are committed to fostering a culture where every member of the Lockton family feels valued and accepted as they are and safe to bring their authentic selves to work every single day. At the end of the day, our mission is to ensure that our family can be anyone’s family.
No Agencies Please
Any Employment Agency, person or entity that submits an unsolicited resume to this site does so with the understanding that the applicant's resume will become the property of Lockton Companies, Inc. Lockton Companies will have the right to hire that applicant at its discretion and without any fee owed to the submitting Employment Agency, person or entity. Employment Agencies, who have fee Agreements with Lockton Companies must submit applicants to the designated Lockton Companies Employment Coordinator to be eligible for placement fees.
Connect with Us