Information Security Analyst
Hands-on information security analyst at global law firm Gibson Dunn, based in Los Angeles or New York, who triages and investigates security events and incidents using SIEM tools, builds detections and dashboards, and monitors emerging AI-related threats. Reports to the Director of Security Operations.
- Compensation
- $150K–$200K / yr
- Location
- Los Angeles; New York City
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Security
- Posted
Skills
Must have
- University degree in a technology-related discipline or 3 years of relevant experience
- 5-7 years of experience in a dedicated information security analysis role
- 3-5 years of IT experience (networking, desktop engineering, programming, systems administration, help desk)
- Practical experience with TCP/IP networking
- Significant experience with the Windows operating system and event logs
- Significant experience with security event detection, analysis and incident response tools
- Significant experience conducting security event analysis and incident response
- Expertise using SIEM platforms, including building complex searches and correlation rules
- Strong knowledge of networking concepts including DNS, switching, routing and firewalls
- Experience investigating security events involving cloud applications, APIs, automation platforms, or AI-enabled technologies
- Experience developing or tuning detections for emerging threats (AI-assisted phishing, impersonation, malware, credential attacks, social engineering)
- Experience using AI-assisted capabilities within security technologies (SIEM, EDR, email security, threat intelligence, vulnerability management, SOAR)
- Experience applying human oversight and validation to AI-generated security findings or automated actions
- Familiarity with AI security concepts such as prompt injection, data leakage, model manipulation, insecure integrations, excessive agency, and adversarial use of AI
- Ability to communicate AI-related security risks to technical and non-technical audiences
- Strong critical thinking and problem-solving skills
- Excellent troubleshooting, problem solving, and verbal/written communication skills
- Must maintain strict confidentiality of the firm's internal and personnel affairs
- Ability to work in a multi-office environment and willingness to travel to other offices as required
- Ability to manage multiple concurrent objectives and prioritize in a high-pressure environment
Full description
Gibson Dunn is a leading global law firm, advising clients on significant transactions and disputes. Our exceptional teams craft and deploy creative legal strategies that are meticulously tailored to every matter, however complex or high stakes. The firm’s work is distinguished by a unique combination of precision and vision.
Based in Los Angeles or New York, the Information Security Analyst is responsible for responding to events and alerts generated by information security technologies, user reported events and any activity, which is suggestive of a potential information security event/incident.
The Information Security Analyst is a hands-on technologist who has a high degree of expertise in the use of technologies used in the investigation of information security events and has a high level of expertise in performing security event analysis and incident response. The Information Security Analyst is a subject matter expert (SME) for all security event detection and response technologies. The scope of this position is firm wide and requires an understanding of all IT systems the firm uses and how they provide value to the business.
The Information Security Analyst works closely with other members of the Information Security Team in ensuring that the information security posture of the firm is maintained and takes a proactive approach in continually assessing the security of firm systems throughout their lifecycle, providing recommendations for enhancing security and adapting to new threats and vulnerabilities.
This role reports to the Director of Security Operations.
Responsibilities include:
- Serve as a primary escalation point for security events
- Serve as an SME for event/incident detection and response
- Analyze and respond to security events found internally or via the firm’s Managed Security Service Providers
- Review security context alerts and logs using the firm’s security information event management platform (SIEM) or other tools
- Build dashboards and custom SIEM queries as need to facilitate detection, response and other use-cases.
- Serve as an initial point of contact for help desk tickets assigned to the Information Security Team
- Promptly respond to requests for assistance from end-users and others regarding incidents or security concerns at the firm
- Escalate security events/incidents according to defined workflow and in accordance with any relevant SLAs
- Thoroughly document the results of security event/incident investigations
- Adhere to relevant policies, procedures, standards and security good/accepted practices