Senior Cyber Security Operations Analyst - CSOC - REMOTE

Join Vanguard as a Lead Cyber Security Operations Analyst in our Cyber Security Operations Center (CSOC) and play a pivotal role in safeguarding our digital ecosystem. This remote position offers a unique opportunity to lead advanced threat detection and mitigation efforts across cloud environments, web applications, and network infrastructure. You will be at the forefront of defending against sophisticated cyber threats, leveraging your expertise in Cloud Security Architecture, Web Application Firewall (WAF) operations, DDoS mitigation, and traffic analysis. Your insights will drive proactive threat modeling and behavioral analytics, ensuring resilient and secure digital experiences for our clients and crew. This role is open for both internal and external candidates who are passionate about cyber defense and eager to make a meaningful impact in a dynamic and collaborative environment. **This remote position can be based anywhere in the US, ideally, within a reasonable distance from a Vanguard Business Center** Core Responsibilities: • Demonstrates knowledge, skills, and ability to conduct formal incident investigations, lead advanced incident handling scenarios including internal and external data breaches, abnormal network and host activity, and assess risk derived from a platform or data-lake. • Mentor junior level analysts and assist when needed. • Provide support for escalated Incident Ticket resolution. • Designs and implements cyber security and operations procedures, tasks and reports. Identifies process gaps and recommends solutions to improve workflow and mitigate risk. • Serves as a security expert in application development, database design, network, and/or platform (operating system) efforts, helping security project teams comply with enterprise and IT security policies, industry regulations, and best practices. • Participates in special projects and performs other duties as assigned. • Top Skills: • Advanced WAF & Edge Security Expertise. Ability to configure, tune, and optimize WAF rulesets (signatures, rate-limiting, bot mitigation, account protection). • Web Application & Traffic Analysis Skills. Proficient in analyzing http/s traffic patterns, including headers, cookies, session tokens, and payloads. • Cloud Security Architecture & Threat Modeling for web applications. Deep understanding of cloud security services, capabilities and defense in depth best practices. Qualifications: 7+ years experience in a cyber security, cyber investigations, cyber threat intelligence, or combination of these three roles. Undergraduate degree in Technical discipline, Computer Science or related field required. Graduate degree preferred. CISSP, AWS Cloud Practitioner, AWS Certified Security - Specialty, or other cloud specific certifications preferred. Automation and scripting for WAF operations. Machine Learning and behavioral analytics for traffic anomalies. Deep understanding of SIEM / SOAR technologies with hand on experience creating correlation rules for complex investigative workflows. Special Factors SponsorshipVanguard is not offering visa sponsorship for this position. About Vanguard At Vanguard, we don't just have a mission—we're on a mission. To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best. Future of Work During the pandemic, we transitioned to a work from home model for the majority of our crew and we continue to interview, hire, and on-board future crew remotely. As we have developed the path forward, we have taken a thoughtful approach that both maximizes the advantages of working remotely and the many benefits of coming together and collaborating in a shared workspace. We believe that in-person interactions among our crew are important for preserving our unique culture and advantageous for the personal development of our crew. When our Crew return to the office, many will work in our hybrid model. A smaller proportion of our crew will operate in the Work from Home work model (for example, field sales crew); or in the Work from Office model (for example, portfolio managers). The working model that your role falls into will be communicated to you in the interview process – please do ask if you are unsure. We encourage you to make the decision regarding your job interview and offer knowing which model your role will fall into. We will test and learn as our ways of working evolve and will continue to evaluate working models along the way. Salary Range:$100,000.00 - $180,000.00