Security Analyst

A Security Analyst works as an individual contributor within Threat Response organization. This role is responsible for leading complex alert investigations, validating and responding to security incidents, and supporting real-time decision‑making during high‑severity events. The analyst will gain a strong working knowledge of Edward Jones’ technology environment, security tooling, and operational processes, and applies that knowledge to quickly assess scope, impact, and appropriate response actions.

This role may guide junior analysts, contribute to incident response execution, and ensure investigations are thoroughly documented and operationally sound.

What You Will Do

Investigate, validate, and triage security alerts to identify and respond to security incidents, escalating confirmed or high‑risk activity in accordance with Threat Response procedures. Lead in‑depth analysis of host, network, log, file, and identity data to determine incident scope, root cause, and potential impact.

Coordinate with incident response partners and technical teams to support containment, remediation, and recovery actions during active security incidents. Provide real‑time analytical input to Threat Response leadership during high‑severity or time‑sensitive incidents to support rapid decision‑making. Ensure all investigations, actions, and outcomes are accurately documented in case management systems to meet operational, audit, and legal requirements.

Mentor and support junior Threat Response analysts by reviewing investigations, providing guidance on analysis techniques, and reinforcing consistent investigation standards. Maintain a strong understanding of the Edward Jones environment, common attack patterns, and adversary techniques relevant to Threat Response operations.

Contribute to continuous Threat Response improvement by identifying gaps in alerting, investigation workflows, and response procedures based on incident experience. Participate in incident after‑action reviews and exercises, providing operational insights and recommended improvements to Threat Response processes. Maintain proficiency in SOC tooling, including SIEM platforms (e.

g., Splunk, Microsoft Sentinel, Log. Rhythm) and case management/orchestration tools (e.g., Service. Now, Swimlane, XSOAR).