Business Analyst II

Job Title:Business Analyst II
Job Location:Cary NC
Job Duration: 8 Months

Job Description:
The Senior Analyst Insider Threat position is part of the Cyber Security Cyber Fraud team managing insider threat investigations globally while providing technical expertise to global incident response associates to help manage identify remediate and mitigate cyber security incidents. This role is an individual contributor role working closely with other teams within Cyber Security IT Risk HR Legal Privacy Operations Global Security teams and other areas within *** to properly respond to Cyber Security incidents and to protect *** from Insider Threat attacks.

Key Responsibilities:
Supoport the Met-CIRT Tier II in their daily fraud monitoring insider threat and other related activities.
Review triage escalate and respond to fraud and security events and incidents
Maintain awareness of emerging threats especially those targeting the financial services industry. This position requires self-motivation a strong willingness to learn and passion for the information security.
Partner with global working teams gather the security requirements and recommend security products services and/or procedures to enhance productivity and effectiveness.
Partner with other teams and and Tier II on user behavior analytics within our Security Information and Event Management.
Perform Insider threat monitoring analyzing and escalating to HR Legal Compliance and other key stakeholders.
Work with other teams within *** on privacy incidents escalated to Fraud team.
Conduct investigations utilizing User Behavioral Analytics (UBA) tools and designated SIEM internal resources and conversations/interviews with persons of interest.
Maintain Runbooks and Standard Operating Procedures (SOPs) for Insider Threat monitoring and Cyber Fraud Monitoring
Provide leadership and training to junior analysts.
Essential Business Experience and Technical Skills:
Required:
Bachelors degree or higher in computer science information systems or related field or equivalent work experience.
Candidate must have 5 years of combined IT and Cyber Security related work experience.
Experience analyzing raw log files (i.e. firewall IDS PCAP system logs web application) performing data correlation and using SIEM or log management tools.
Strong understanding of network protocols TCP/IP fundamentals and security infrastructure command line tools and regex.
Familiar with eDiscovery tools processes and procedures.
Experience with data analytics tools to include PowerBI User Behavioral Analytic tools and Security Information and Event Management (SIEM) systems
Experience with Fraud DLP and insider threat.
Relevant industry certifications such as CISSP CCNA-Security Security GIAC and Six Sigma.

Preferred:
Strong experience with Splunk or other Data Analytics tools
Experience using SIEM or other log management tools.
Experience with machine learning techniques and big data analysis to implement automation solutions.
Fraud monitoring experience and ability to interact with employees globally