What is the Position? The Security Operations role at Evercore focuses on the tactical side of cyber security and how it relates to the detection, prevention, and response to cyber risks to the firm. This position works as part of a globe security operations team to continually investigate, monitor and improve Evercore’s security posture. Working as part of a broader security initiative, this role is in continuous communication with both the governance and architecture teams to protect against current and emerging cyber threats to the organization. As part of this role a high level of integrity, humility and empathy will be required to work on a cross functional team to achieve success.

Primary Responsibilities:

• Serves as an escalation point for security related tickets and incident triage
• Analysis of security events to confirm real incidents and adjustment of false positive
• Works with security architecture to increase efficiency and improvements of security monitoring
• Utilization of security tools to monitor for security risks and insider threats that include: EDR, SIEM, SOAR, NGAV, Deception, NAC, IPS, Vulnerability Management, Insider Risk and Threat Intel
• Liaison between third party managed security service provider and internal security resources
• Assists with developing and creating ways to automate the security operations response to incidents
• Mentor junior members of the team and become an advocate for security across all departments

Specific Qualifications:

Education and Experience

• Creation and fine tuning of correlation rules within security toolsets
• Log analysis experience for investigation of threats and triaging alerts across multiple platforms
• SOAR experience implementing and creating custom playbooks (a plus)
• Experience with EDR tools to investigate events or perform incident response
• Threat modelling with the application of MITRE frameworks to build a security operations program
• Utilizing threat intel to increase the predictive nature of security monitoring while adding contextual value to security alerts
• Knowledge of performing security operation tasks and techniques within a cloud environment
• Knowledge of offensive security tools, tactics and techniques

Job Knowledge, Skills and Abilities

• Ability to build relationships across all areas of the business and information technology
• Hands on experience with EDR and SIEM
• Functional knowledge of SOAR with hands on experience a plus
• Python and forensics analysis experience a plus
• CISSP or other security certifications a plus
• Experience (5- 7) years in IT security or infrastructure related roles
• Drive, resiliency, adaptability, humility, integrity, effective intelligence, team-ability, curiosity, and emotional strength are mandatory
• This position requires valid United States work authorization and is not eligible for visa sponsorship

Expected Base Salary Range: $140,000-160,000

In addition to a competitive base salary, employees may be eligible to receive a discretionary bonus delivered in the form of cash and/or deferred equity. Evercore also offers a variety of benefits and programs, subject to eligibility. These include, but are not limited to:

• Medical, prescription, dental, and vision insurance, including healthcare savings and reimbursements accounts
• 401(k) Retirement Plan
• Life and disability insurance, including additional voluntary financial protection insurance
• Well-being resources and programs, including mental health and mindfulness programs, digital wellness platforms, well-being events, and targeted on-site health services
• Family-building and family-support benefits
• Paid parental, caregiver, marriage and bereavement leave
• Commuter benefits, health club membership discounts, and other corporate discounts
• Paid holidays, vacation days, personal days, sick days, and volunteer opportunities