[Hiring] Senior Information Security Analyst @The Hanover Insurance Group

Role Description

The Senior Information Security Analyst serves as a first responder to any security related events and is key to Hanover’s security posture. You need to have SME on how these events affect Hanover and best security practices to defend or remediate such events. Must have the ability to partner/collaborate with any team within the enterprise, such as IT, audit, HR, etc., to identify any current issue, educate associated teams, recommend options for remediation, and work issues through to resolution.

In this role, you will:

• Monitor IDS alerts, network and system logs, plus network traffic to detect and report threats
• Open Incident tickets for tracking of security events and document resolution
• Monitor trend analysis and document findings
• Perform work across multiple platforms with an intermediate depth of knowledge in each platform
• Advise on Threats and Vulnerabilities aiding in prioritization of activities
• Research security threats and develop IOC (Indicators of Compromise) for detecting potential anomalies and patterns with infected systems
• Perform incident response to include security event analysis, incident handling, reporting, and threat analysis
• Provide technical analysis, design, support and make recommendations for various security applications, technologies, and products to Sr Team Members and Leadership
• Provide situation reports for DFiR (Digital Forensics, Incident Response) or escalations to leadership
• Training and mentoring of other analysts
• Perform work across multiple platforms with a depth of knowledge in at least 2 of those platforms
• Act as the escalation path for more junior staff, to validate findings and identify scope of events and support during larger investigations
• May lead other team members on projects or initiatives and assign tasks as appropriate
• Coordinate team collaboration across the IT organization

Qualifications

• Bachelor’s degree in computer science or related field or equivalent knowledge with 5+ years of related professional experience
• Technical expertise in systems administration and security tools, combined with knowledge of security practices and procedures
• Intermediate networking knowledge to include multiple protocols
• Excellent independent and team collaboration skills
• Experience working in complex environments with a high degree of organizational effectiveness
• Ability and commitment to communicate effectively, consistently choosing communication methods to ensure critical information reaches and persuades intended audience
• Strong team player with strong interpersonal skills to build partnerships with stakeholders and peers
• Excellent analytical, decision-making and problem-solving skills
• Openness to Learning - Expands knowledge base through traditional and non-traditional education to improve personal skills and abilities
• Requiring some combination of the following certifications:
• OS Level Certifications
• Security+
• GSEC
• SSCP
• CEH

Benefits

• Medical, dental, vision, life, and disability insurance
• 401K with a company match
• Tuition reimbursement
• PTO
• Company paid holidays
• Flexible work arrangements
• Cultural Awareness Day in support of IDE
• On-site medical/wellness center (Worcester only)