Security Operations Analyst

Position: Security Operations Analyst

Location: Cayman Islands

About Us

The Maples Group is a global leader in financial services, trusted by many of the world’s largest hedge fund managers, private equity firms, and international corporations.

Our side-by-side financial and legal teams consistently deliver award-winning services to a global client base, offering unrivalled learning and career opportunities to our 2,500 colleagues worldwide.

What’s it like to work here?

We are driven to excel, and collaboration is key to our continued success. We can go further for our clients because we go further for each other too. Our inclusive culture creates an environment where people can be themselves at work while doing their best work. No matter where you work in the Maples Group, you will be part of a global team.

The Opportunity

We are looking for an accomplished Security Operations Analyst to join our Information Security team as part of our financial services business in Grand Cayman.

The Cayman Islands is home to our global headquarters and where the Maples Group first established operations in the 1960s. Since then we have grown to become one of the largest employers in Cayman, where colleagues from all over the world collaborate to deliver best-in-class solutions to clients worldwide. As part of our Cayman team you will:

• Perform analysis of logs from a variety of sources (e.g., individual host logs, network traffic logs) to identify potential threats.
• Conduct log-based and endpoint-based threat detection to detect and protect against threats coming from multiple sources.
• Participate in continuous active threat hunting across the environment, to include reacting to technical alerts as well as proactively searching for trends or areas of interest, working with peers to resolve any potential threats in a timely manner.
• Contribute to information security process improvement including recommendations for tuning of rules to reduce false positives.
• Actively contribute to vulnerability reviews, including the coordination of required fixes/changes where necessary.
• Act as a SME for the organisation's file sharing platform, to include resolving access issues and applying patches/upgrades when available.
• Work with Security Information and Event Management (SIEM) to manage/tune the system, create/manage the detection content and actively watch for alerts.
• Correlate network, cloud and endpoint activity across environments to identify attacks and unauthorised use.
• Tier 2 support for web proxy to include timely and effective troubleshooting and implementation of fixes.
• Research emerging threats and vulnerabilities to aid in the identification of incidents.
• Assist with creating and developing playbooks for managing security events.
• Maintain quality of service by following organisational standards.
• Understand the organisation’s mission, values, operations, goals, risks and risk tolerance.
• Contribute to team effort by supporting peers and accomplishing related results as needed.
• Recognise problems by identifying abnormalities and reporting security violations.
• Maintain technical knowledge by attending training courses, educational workshops where required.

What You Bring

In addition to indisputably high ethical standards and autonomy, the ideal candidate possesses the following:

• Minimum 3 year's experience in a similar role is required, to include analysing network and host-based security events.
• Good, demonstrable understanding of malware analysis, intrusion detection, and threat intelligence.
• Proven ability to work independently and collaboratively as part of a global team.
• Ability to work on own initiative with minimal to no supervision and adapt to changing environments with ease.
• Strong understanding of web proxies and experience with troubleshooting performance issues.
• Knowledge of network systems and security protocols.
• Experience with attacker tactics, techniques and procedures.
• Knowledge of security software programs and implementation.
• Basic knowledge of best practices in developing security procedures and infrastructure.
• Experience with file sharing platforms and applying patches/upgrades.
• Strong analytical and problem solving skills.
• Consistent attention to detail and follow up skills.
• Strong team player with proven ability to self-manage in a pressured environment and whilst dealing with competing priorities.
• Excellent communication, interpersonal and consultative skills.
• Ability to interface with, and gain the respect of, stakeholders at all levels and roles in the organisation.