Senior Security Analyst/ Security Architect Threat Detection Team

Job description

**Innovate here.

And see your ideas come to life.**

It's an exciting time to work in tech at Edward Jones.

We are making massive investments in emerging technologies to improve how we work with our clients and with each other.

Relationships are the focus of our business model.

And working in Technology here means using your skills to build, deliver and maintain the technologies that enable us to deepen and support those relationships.

The best part?

We develop and create our own industry-leading solutions internally.

And you can be a part of it.

Working with emerging new technologies.

Creating platforms, programs and experiences that change how we work together - and support our client-first focus.

Changing the future of our firm, the industry and the advisor-client relationship.

**Job Overview**

**Position Schedule:** Full-Time

This job posting is anticipated to remain open for 30 days, from 01-Oct-2025.

The posting may close early due to the volume of applicants.

**Team Overview:**
The Senior Cybersecurity Analyst will work at the direction of the Team Lead to independently perform moderately complex offensive and defensive security activities in the Incident Response, Threat Detection, Hunt, and Red Team spaces.

They will often provide input to peers and leaders for quickly decisioning and actioning events in high-pressure and high-risk situations that may have a material impact on the Firm.

The Senior Cybersecurity Analyst will have a broad understanding of the Firm's technology systems and processes and the security, threat, and regulatory landscape as it pertains to those systems and processes.

They will have a deep understanding of how external threat actors operate and be responsible for executing on initiatives that protect EDJ against them.

While primarily a hands-on-keyboard role, the Senior Cybersecurity Analyst will help to develop, coach and mentor junior members of the team.

**What You'll Do:**

+ Independently perform detailed research into attacker techniques and behaviors to produce tactic and technique reports and then supporting detections.
+ Continuous learning to work towards subject matter expertise around new and emerging security threats (including specific tactics, techniques, and procedures); new and emerging technology capability areas (ie: cloud, AI, quantum); and new and emerging regulatory requirements to ensure the Firm is properly prepared to prevent, detect and recover from advanced cyber attacks.
+ Function as a key component in decision making by providing accurate and detailed accounts of events to Senior Analysts and leadership in a coordinated fashion during high-stress and ambiguous situations that involve balancing security decisions with business impact to obtain the best outcome for the Firm.
+ Actively participate in after-action reviews for security incidents and red team assessments to understand Firm impact, perform root cause analysis, identify and escalate potential risks, identify opportunities for improving controls and processes, and ensuring all regulatory reporting obligations have been met.
+ Contribute to documentation, processes, and capability development; incorporating industry best practices, regulatory requirements, and lessons learned from previous events.

Ensure that all security investigations, threat detection content, and red team assessments are properly documented/tracked to meet team, audit, and legal requirements
+ Track against KPIs, KRIs, and benchmarks through data analytics to measure the effectiveness of the service.

Ensure risks are identified and escalated, and help to identify opportunities for adjusting operational processes accordingly.
+ Effectively communicate with peers and leadership, to ensure awareness of progress, challenges, and impact of ongoing security incidents or operations.

Including the ability to clearly discuss complex technical or security topics with a non-technical audience.
+ Understand relationships with identified business partners within security and across the Firm (including Technology, Privacy, Legal, Third-Party Risk Management, Crisis Management, and Enterprise Risk Management) to ensure that teams operate effectively.
+ Maintain relationships with Security Architects and Security Engineering teams to provide feedback on control and technology performance in an effort to continuously improve and mature capabilities.
+ Mentor and coach less senior team members and represent the Firm across the financial service's information security community through industry forums, working groups, and conference presentations.

Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage.

Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates.

Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account.

Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism.

Associates may be eligible for bonuses and profit sharing.

All associates are eligible for the firm's Employee Assistance Program.

For more information on the Benefits available to Edward Jones associates, please visit our benefits page (https://secure.edwardjonesbenefits.com/fleet/public/index/f914262d-0362-4682-bd1e-0ccd25f1dfb1) .

**Hiring Minimum:** $117000
**Hiring Maximum:** $199300

Read More About Job Overview

**Skills/Requirements**

**What Experience You'll Need:**

+ 8+ years relevant cybersecurity experience in progressive roles
+ Degree in Cyber Security, Computer Science, Computer Engineering, Information Systems or related field preferred
+ Completed advanced training and certifications (SANS FOR509, SANS FOR528, SANS SEC588, SANS SEC595, Cloud, etc)
+ Advanced knowledge across specialty areas to include Windows, Linux, Mac OS, Cloud, Authentication/Identity, Network, Email, Application, Infrastructure, and Data
+ Demonstrated competency in various cybersecurity tools/datasets and how to leverage them effectively
+ Understanding of Mitre ATT&cK and D3fend framework and how to apply them to detection engineering
+ Demonstrable experience briefing leaders, including senior leadership, on security incidents/assessments
+ Experience with writing code/scripts in at least one language (Python, PowerShell, Bash, Go, etc)
+ Demonstrated ability to contribute meaningful and relevant data in a coordinated way to critical decision makers in ambiguous and high-pressure situations
+ Technical proficiency in documenting research into attacker
+ Expertise on current security threats and vulnerabilities and of how threat actors execute common attack paths at the tactics, techniques and procedures level
+ Demonstrated competency related to security technologies, processes, requirements, challenges, and best practices
+ Demonstrated experience in managing regulatory requirements and common frameworks used by security organizations within the Financial Industry
+ Demonstrated experience in working in Product Teams and Agile methodology and practices

**Current INTERNAL home-based associates:** While this role is posted as hybrid, **if selected and accepted, you may retain your home-based status** .

Edward Jones intends in good faith to continue offering the role as home-based, though future business or regulatory needs may require on-site work.

Read More About Skills/Requirements

**Awards & Accolades**

At Edward Jones, we are building a place where everyone feels like they belong.

We're proud of our associates' contributions to the firm and the recognitions we have received.

Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones (https://careers.edwardjones.com/blog/?_sft_category=awards-accolades)

Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones (https://careers.edwardjones.com/en-CA/blogs/?_sft_category=awards-accolades-en-ca)

Read More About Awards & Accolades

**About Us**

Join a financial services firm where your contributions are valued.

Edward Jones is a Fortune 500¹ company where people come first.

With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns.

Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society.

We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging.

People are at the center of our partnership.

Edward Jones associates are seen, heard, respected, and supported.

This is what we believe makes us the best place to start or build your career.

View our Purpose, Inclusion and Citizenship Report (https://careers.edwardjones.com/blog/edward-jones-releases-annual-purpose-inclusion-and-citizenship-report/?codes=DIRECT&utm_source=DIRECT) .

¹Fortune 500, published June 2024, data as of December 2023.

Compensation provided for using, not obtaining, the rating.

Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law.

#LI-HO

Required Skill Profession

Other General