[Hiring] Senior Cyber Security Analysts - Cyber Threat Hunting @FIS

Role Description

FIS Management Services, LLC seeks Senior Cyber Security Analysts - Cyber Threat Hunting (CTH) in Jacksonville, FL to drive proactive, hypothesis-based threat hunts across endpoint, network, identity, and cloud telemetry to uncover stealthy adversary activity, directly contributing to reductions in attack dwell time within the FIS environment.

• Implement independent execution of complex investigations using enterprise-level EDR and SIEM platforms.
• Correlate multi-source evidence and provide rapid scoping, containment, and remediation support for incidents including malware, credential compromise, and unauthorized access.
• Document hunt outcomes and investigative conclusions.
• Translate threat intelligence and adversary TTPs into high-fidelity behavioral analytics mapped to frameworks such as MITRE ATT&CK.
• Partner with Security Operations Center, Penetration Testing Teams, and Detection Engineering stakeholders to operationalize successful hunts into durable detections and improved response playbooks.
• Automate and scale hunting and investigative workflows through scripting languages (PowerShell/BASH/Python), enrichment, and data analysis to improve speed, consistency, and signal quality.
• Lead threat hunting efforts in newly acquired or integrating M&A environments.
• Provide technical direction, standards, and mentorship through threat hunting expertise, supporting FIS’s internal Cyber Security function.

Qualifications

• Bachelor’s degree or foreign equivalent in Computer Engineering, Computer Science, Cybersecurity, or a related field.
• Five (5) years of experience in an information security or related role.

Requirements

• Performing threat hunting, cyber threat intelligence, and incident response activities within enterprise environments.
• Investigating malware, credential compromise, and unauthorized access.
• Investigating endpoint-based security threats using enterprise EDR platforms, including CrowdStrike Falcon.
• Developing, tuning, and investigating security detections using SIEM platforms including Splunk, Azure Sentinel, and QRadar.
• Investigating malicious infrastructure threats using enterprise security and threat intelligence platforms, including Anomali.
• Supporting cybersecurity incident response activities, including incident triage, scoping, containment, and remediation.
• Utilizing scripting and automation to support security operations, including Python, PowerShell, and Bash.
• Consuming and applying threat intelligence, including indicators of compromise (IOCs), adversary tactics, techniques, procedures (TTPs), and open source intelligence (OSINT).
• Mapping activity to MITRE ATT&CK industry recognized frameworks.

Company Description