IND Lead Engineer, Security - Security Operation Centre Specialist
Role Overview
The Hartford's Information Protection (THIP) organization is looking for an experienced cybersecurity professional to join our Threat Management team. In this role, you will help protect the company by detecting, investigating, and responding to security threats across our enterprise environment.
As a Level 2 SOC Analyst, you will serve as an escalation point for security incidents, support threat hunting activities, and work closely with our Security Operations Center (SOC) and Incident Response teams. This is an excellent opportunity to make a meaningful impact while working with modern security technologies across cloud, endpoint, network, and email environments.
Key Skills for This Role
Full Job Posting
About the Role
The Hartford's Information Protection (THIP) organization is looking for an experienced cybersecurity professional to join our Threat Management team. In this role, you will help protect the company by detecting, investigating, and responding to security threats across our enterprise environment.
As a Level 2 SOC Analyst, you will serve as an escalation point for security incidents, support threat hunting activities, and work closely with our Security Operations Center (SOC) and Incident Response teams. This is an excellent opportunity to make a meaningful impact while working with modern security technologies across cloud, endpoint, network, and email environments.
What You'll Do
Investigate and respond to cybersecurity alerts and incidents escalated from Level 1 analysts.
Monitor and analyze security events using SIEM and other security monitoring platforms.
Perform threat hunting activities to proactively identify suspicious behavior and emerging threats.
Review and investigate activity across networks, endpoints, cloud platforms, email systems, and security tools.
Leverage threat intelligence to identify risks and improve detection capabilities.
Coordinate with infrastructure, cloud, application, and security teams during incident response activities.
Help improve monitoring, detection content, and incident response processes.
Participate in a rotating 24x7 on-call support schedule.
Required
3+ years of experience in Information Security, Threat Management, or Security Operations.
4+ years of experience in technical IT roles such as networking, systems administration, or infrastructure support.
Strong analytical and investigative skills with the ability to assess risk and make sound security decisions.
Experience working collaboratively across technical and business teams.
Preferred Technical Skills
- SIEM platforms such as Splunk, CrowdStrike Next-Gen SIEM, or Microsoft Sentinel.
- Endpoint Detection and Response (EDR) technologies such as CrowdStrike, Microsoft Defender XDR, Carbon Black, or Sentinel One.
- Cloud security monitoring and investigation across AWS, Microsoft Azure (M365), Google Cloud.
- Cloud security tools such as AWS GuardDuty, Google Security Command Center (SCC), Orca, Wiz, or similar CSPM solutions.
- Email security, phishing, and Business Email Compromise (BEC) investigations.
- Threat Intelligence Platforms (TIPs) and threat hunting methodologies.
- Knowledge of malware analysis, attack techniques, indicators of compromise, and modern threat actor tactics.
Education & Certifications
Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent experience.
Industry certifications such as ISC2, GIAC, or ISACA certifications are preferred.
Requirements
- SIEM platforms such as Splunk, CrowdStrike Next-Gen SIEM, or Microsoft Sentinel.
- Endpoint Detection and Response (EDR) technologies such as CrowdStrike, Microsoft Defender XDR, Carbon Black, or Sentinel One.
- Cloud security monitoring and investigation across AWS, Microsoft Azure (M365), Google Cloud.
- Cloud security tools such as AWS GuardDuty, Google Security Command Center (SCC), Orca, Wiz, or similar CSPM solutions.
- Email security, phishing, and Business Email Compromise (BEC) investigations.
- Threat Intelligence Platforms (TIPs) and threat hunting methodologies.
- Knowledge of malware analysis, attack techniques, indicators of compromise, and modern threat actor tactics.
About The Hartford
Provider of property and casualty insurance and employee benefits.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at The Hartford
Senior Software Engineer / Data
, IND
IND Staff Engineer, Infrastructure
, IND
IND Red Team Engineer, Security
, IND
IND Associate Software Engineer - Red Team Engineer
, IND
General Liability Claim Consultant/Specialist - Personal and Advertising Injury Liability
Hartford, USA
Manager Learning Measurement and Impact
Hartford, USA
Workers’ Compensation Senior Claim Representative
Hartford, USA
Inland Marine Underwriter
Charlotte, USA