CSOC Triage Analyst

Careers at Bloomberg

Back to Search

New York, NY

Posted Nov 22, 2019 - Requisition No. 79885

We protect Bloomberg.

There's no such thing as a "safe system" - only safer systems. Our Security teams work to build and maintain the safest operating environment for Bloomberg’s users. The Triage Analyst's function, within the Cyber Security Operations Center, is considered to be a key pillar in Bloomberg’s security program design and strategy. Are you a motivated technical professional, who has a passion towards cyber security? And are accomplished in a systems- or applications-support role? In this entry role, Bloomberg will provide you the opportunity to apply your current skills, while you rapidly developing new ones that are required in the Cyber Security field.

The Bloomberg CSOC is responsible for the detection of cyber threats, and when detected, responsible for the rapid response, across both the diverse lines of business and the global network. The CSOC is an open and collaborative environment, where members work together to identify and address the latest in cyber security threats facing the company. The CSOC is to staffed 24 x 7 x 365, with varying shifts, and multiple tiers of support, ranging from first response teams to the Computer Incident Response Team. Further, there is opportunity to work with these more experienced members on some of the latest cyber security defense technologies.

In this role, we'll trust you to:

  • Be open to flexible working hours for example: work within a dedicated Weekend Night shift (Thursday-Friday 11AM-8PM, Saturday 8PM-Sunday 9AM, Sunday 8PM-Monday 9AM), to support the 24x7x365 Cyber Security Operations Center
  • Demonstrate a passion and good judgment as a network defender
  • Identify and act as the initial responder to all security events
  • Learn and understand the broader security of Bloomberg’s environment
  • Monitor for events that match pre-defined criteria, and respond according to standard operating procedures as well as use good judgment for matters where a procedure doesn’t exist
  • Bring to closure a significant majority of events without the involvement of other teams
  • Share robust case notes when raising issues in order to help the next team member
  • Remain up-to-date with cyber security threats and trends
  • Deliver on relevant cyber security metrics and measurements for the role and area of responsibility
  • Collaborate directly with colleagues across the firm to resolve security matters while furthering the program’s brand through your constructive and thoughtful approach
  • Respond to varying seniority levels of employees and contractors throughout Bloomberg, to address cyber security concerns
  • Ensure appropriate coverage for the assigned shift and provide ample awareness to changes to commitments
  • Produce and maintain documentation and standard operation procedures
  • Generate ideas for continued improvement, including conceptual design of new threat scenarios

You'll need to have:

  • Deep understanding in a variety of logs, log events and Splunk
  • Previous experience working with a Security Event and Incident Management platform
  • Knowledge of enterprise network and host security controls
  • Experience working with remote cross-regional teams
  • Ability to be autonomous but proactive in reaching out for support
  • Good familiarity with operating systems (Windows, Linux and MAC)
  • Solid understanding of computer networks and the TCP/IP stack
  • Deep understanding of cyber security trends and potential threats
  • Knowledge of client-server applications, multi-tier web applications, relational databases, firewalls, VPNs and enterprise Anti-Virus products
  • Prior experience with Microsoft Office solutions
  • Proven initiative in further growing knowledge in security space
  • Good communication and interpersonal skills and the ability to take initiative
  • Dedication and ability to collaborate with team members
  • Experience providing superb customer service

We'd love to see:

  • Work experience within a Cyber Security Operations Center
  • Experience with programming / scripting
  • Experience with middle-ware web services (IIS, Apache)
  • Experience with databases (MS SQL, Oracle, DB2)
  • Relevant Certifications in the information security space
  • Bachelor’s degree in related field

If this sounds like you:

Apply! If we think you are a good match we'll get in touch to let you know the next steps.

To learn more, visit our YouTube channel “Inside Bloomberg” www.youtube.com/InsideBloomberg

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status

Similar jobs

    The Bloomberg Talent Network

    Stay connected with us and be among the first to learn about new job opportunities. We’ll use the information you provide to help us get in touch with you to align your expertise with our opportunities and better direct our conversations.

    CONNECT WITH US