3 Cybersecurity Threats Jobs

As a Senior Information Security Risk Analyst, you will lead and conduct comprehensive security risk assessments across EQ's internal systems, infrastructure, cloud platforms, third-party services, applications, mobile environments, and networks. Your role will be pivotal in identifying and evaluating potential cybersecurity threats and vulnerabilities, ensuring robust risk mitigation strategies are in place to protect EQ's data and systems. You will work cross-functionally with stakeholders to embed security best practices and ensure alignment with regulatory and organizational standards. You will review cloud architecture, deployment models, and services to identify gaps against industry best practices (e.g., CIS Benchmarks, NIST, ISO 27001) and collaborate with DevOps and Cloud Engineering teams to advise on security controls and risk mitigation strategies in AWS, Azure. Additionally, you will lead the analysis and interpretation of security data from diverse sources, including technical assessments, penetration test reports, and code reviews, to identify systemic vulnerabilities, inform strategic risk decisions, and guide enterprise-level remediation efforts. Your responsibilities will also include driving the development and strategic recommendation of risk mitigation initiatives, translating assessment findings into actionable improvements to security policies, enterprise controls, and technical architectures. You will maintain Risk records and Risk Acceptances regarding IT, Information, or Cyber Security in the Company's Risk Register/GRC tool. Furthermore, you will lead the interpretation and strategic integration of evolving cybersecurity regulations and standards (e.g., GDPR, NIST, ISO 27001, SOX, AI Act, DORA) in collaboration with Legal and Compliance to ensure enterprise-wide alignment and risk-informed decision-making. You will conduct enterprise-level compliance assessments and cybersecurity gap analyses to evaluate EQ's adherence to relevant regulations and frameworks, embedding these requirements into the broader Risk Management lifecycle to ensure systematic enforcement across all new and evolving IT systems and applications. In addition, you will conduct Risk Analysis of existing and new third-parties playing a significant role in the Company's supply chain and with access to Company or customer data or the Company's systems. You will track any significant risk issues arising to completion over agreed timescales. Your role will also involve overseeing the aggregation and analysis of enterprise-wide risk data to identify emerging threats and delivering strategic, data-driven insights and reports to Executive and senior leadership teams. You will engage with various developers and stakeholders across the business in selecting tailored security training on the training platform and participate in knowledge sharing sessions on emerging threats and security risk trends. Moreover, you will lead the evolution and governance of the enterprise Security Risk Management Framework, collaborating across IT and security teams to embed effective technical controls (e.g., firewalls, encryption, MFA) and ensure policies, standards, and procedures align with best practice and regulatory requirements. You will also advise and enable secure software development by defining secure coding standards, guiding development teams, and integrating application security testing tools into the SDLC.,

As a Security Analyst, your main responsibilities will include conducting security assessments such as vulnerability assessments, penetration testing, and endpoint security assessments. You will be tasked with analyzing security data to pinpoint threats and potential vulnerabilities. Your role will require you to implement and uphold security controls like firewalls, intrusion detection/prevention systems, and endpoint security solutions. Additionally, you will be expected to actively participate in security incident response activities, which involve investigation and remediation processes. Furthermore, you will play a key role in assisting with the development and execution of security policies and procedures within the organization. It will be essential for you to stay informed and updated on the latest cybersecurity threats and vulnerabilities in order to effectively safeguard the company's digital assets. Documenting security findings and providing recommendations based on your analyses will also be a crucial aspect of your responsibilities. In this role, you will be supporting the Team Lead in various cybersecurity initiatives, thereby contributing to the overall security posture of the organization. This position is full-time and requires a minimum of 3 years of relevant work experience. The work location for this role is in-person, which will enable you to collaborate effectively with the team and address security challenges proactively.,

What you will do In this vital role you will Information Security Operations manages a CSOC Tier 1 (T1) shift as part of a 24/7 Cybersecurity Operations Center (CSOC). This role acts as a technical lead, ensuring alignment with standard operating procedures, analyzing security events, and contributing to the improvement of cybersecurity processes. Additionally, the Sr. Associate assists in incident response across the lifecycle phases, from response to lessons learned. Roles & Responsibilities: Act as a technical lead for the CSOC T1 shift, ensuring alignment with standard operating procedures. Analyze security events, identifying common tactics, techniques, and procedures used by threat actors. Improve cybersecurity operations processes, critical metrics, and documentation. Participate in and optimize CSOC T1 knowledge-sharing and learning sessions. Assist incident responders with coordinating the response, containment, eradication, recovery, and lessons learned phases of the incident response lifecycle. Basic Qualifications: Masters degree and 1 to 3 years of Information Technology or Cybersecurity experience OR Bachelors degree and 3 to 5 years of experience in Security Operations or related field OR Diploma and 7 to 9 years of experience in Security Operations or a related field Preferred Qualifications: Must-Have Skills: Solid understanding of security technologies and their core functionality Experience in analyzing cybersecurity threats, with up-to-date knowledge of attack vectors and the threat landscape. Experience documenting and optimizing information security processes and procedures. Ability to prioritize tasks and solve problems efficiently in a diverse, global team environment. Good knowledge of Windows and/or Linux systems, including scripting languages. Good-to-Have Skills: Familiarity with 24/7 CSOC operations and incident response lifecycle. Experience in leading CSOC shifts and implementing cybersecurity improvements. Professional Certifications: CompTIA Security+ (preferred) CEH (preferred) GSEC (preferred) MTA Security Fundamentals (preferred) CISSP (preferred) Soft Skills: Strong communication and collaboration skills, particularly when working with global teams. Ability to manage and prioritize tasks effectively in a high-pressure environment. Critical thinking and problem-solving abilities, especially in incident response situations. A commitment to continuous learning and knowledge sharing.