[Hiring] Senior Cyber Security Analyst - Cyber Threat Hunting @FIS Global

Role Description

FIS Management Services, LLC seeks Senior Cyber Security Analysts - Cyber Threat Hunting (CTH) in Jacksonville, FL to drive proactive, hypothesis-based threat hunts across endpoint, network, identity, and cloud telemetry to uncover stealthy adversary activity, directly contributing to reductions in attack dwell time within the FIS environment.

• Implement independent execution of complex investigations using enterprise-level EDR and SIEM platforms.
• Correlate multi-source evidence and provide rapid scoping, containment, and remediation support for incidents including malware, credential compromise, and unauthorized access.
• Document hunt outcomes and investigative conclusions, translating threat intelligence and adversary TTPs into high-fidelity behavioral analytics mapped to frameworks such as MITRE ATT&CK.
• Partner with Security Operations Center, Penetration Testing Teams, and Detection Engineering stakeholders to operationalize successful hunts into durable detections and improved response playbooks.
• Automate and scale hunting and investigative workflows through scripting languages (PowerShell/BASH/Python), enrichment, and data analysis to improve speed, consistency, and signal quality.
• Lead threat hunting efforts in newly acquired or integrating M&A environments, requiring rapid assessment of unfamiliar architectures, establishment of baselines, identification of inherited risk and latent compromise, and hunting for pre- and post-acquisition adversary activity while informing integration and risk-reduction strategies.
• Provide technical direction, standards, and mentorship through threat hunting expertise, supporting FIS’s internal Cyber Security function.

Qualifications

• Bachelor’s degree or foreign equivalent in Computer Engineering, Computer Science, Cybersecurity, or a related field.
• Five (5) years of experience in an information security or related role, including:
• Performing threat hunting, cyber threat intelligence, and incident response activities within enterprise environments.
• Investigating malware, credential compromise, and unauthorized access.
• Investigating endpoint-based security threats using enterprise EDR platforms, including CrowdStrike Falcon.
• Developing, tuning, and investigating security detections using SIEM platforms including Splunk, Azure Sentinel, and QRadar.
• Investigating malicious infrastructure threats using enterprise security and threat intelligence platforms, including Anomali.
• Supporting cybersecurity incident response activities, including incident triage, scoping, containment, and remediation.
• Utilizing scripting and automation to support security operations, including Python, PowerShell, and Bash.
• Consuming and applying threat intelligence, including IOCs, adversary TTPs, OSINT, and mapping activity to MITRE ATT&CK frameworks.

Requirements

• Telecommuting and/or working from home may be permissible pursuant to company policies.

Company Description