What are the responsibilities and job description for the Information Security Analyst - Mastery position at MassMutual?
The Opportunity
As a Mastery Level Security Operations Center (SOC) analyst you’ll have an opportunity to be part of a growing team of highly technical Cybersecurity analysts who are passionate about protecting MassMutual’s assets and customers by leveraging Agentic capabilities, problem solving skills and innovative technology solutions. In this role, as well as all roles within MassMutual, you will demonstrate accountability, agility, a dedication to be inclusive, a strong business acumen, and will show courage, even in the most difficult situations. We also highly value strong communication skills, a passion for learning, leadership traits, resilience, and self-awareness.
The Team
As a member of the SOC team, you will work in close collaboration with fellow security analysts, engineers, and other IT security specialists throughout the firm including the Security Operations Center, Threat Intelligence, Offensive Security, Security Platforms Support, Network Security, Endpoint Security and IAM teams
The Impact
MassMutual offers the opportunity to do meaningful work within a purpose-driven organization that values long-term impact over short-term outcomes. In this role, you can expect:
If you need an accommodation to complete the application process, please contact us and share the specifics of the assistance you need.
California residents: For detailed information about your rights under the California Consumer Privacy Act (CCPA), please visit our California Consumer Privacy Act Disclosures page.
As a Mastery Level Security Operations Center (SOC) analyst you’ll have an opportunity to be part of a growing team of highly technical Cybersecurity analysts who are passionate about protecting MassMutual’s assets and customers by leveraging Agentic capabilities, problem solving skills and innovative technology solutions. In this role, as well as all roles within MassMutual, you will demonstrate accountability, agility, a dedication to be inclusive, a strong business acumen, and will show courage, even in the most difficult situations. We also highly value strong communication skills, a passion for learning, leadership traits, resilience, and self-awareness.
The Team
As a member of the SOC team, you will work in close collaboration with fellow security analysts, engineers, and other IT security specialists throughout the firm including the Security Operations Center, Threat Intelligence, Offensive Security, Security Platforms Support, Network Security, Endpoint Security and IAM teams
The Impact
- Perform advanced Malware analysis and extract Indicators of Compromise (IOCs) to feed our Threat Intelligence Platform
- Develop and deploy SOAR automations accelerating internal SOC processes.
- Work closely with our Data Science Team to build Agentic capabilities
- Work collaboratively with our Security Intelligence team to enrich and enhance prevention, detection, and threat hunting capabilities
- Optimize alerting platforms through rule development and tuning of existing alerting logic
- Act as team lead, mentor Junior Analysts, be a go to escalation point for other SOC analysts
- Perform QA responsibilities ensuring thorough analysis and documentation
- Bachelor's Degree or equivalent professional experience
- 8 years’ experience working in a Security Operation Center or similar cyber security technical role.
- 1 year’s experience working with Artificial Intelligence models to enhance SOC capabilities.
- 2 years experience writing in Python.
- 2 years experience working with SOAR platforms
- Relevant Cyber Security GIAC Certification such as CISM, CEH, GCIH, GCDA or similar.
- Able to support off hours escalations
- Bachelor’s degree in cyber security
- Certifications: CISSP, CISM, CISA, GCIH, GCFR
- Knowledge of and practical experience with the MITRE ATT&CK framework
- Mastery of Python, PowerShell or other scripting languages
- Experience working with a SIEM platform mining large datasets
- Understanding of web application vulnerabilities including XSS, CSRF, SQL Injection, command injection and serialization attacks
- Interest in continuous learning and a passion for Cybersecurity
- Experience and confidence communicating with and presenting to senior leadership
- Strong analytical and problem-solving skills
- Advanced technical expertise developing security automations
- In depth knowledge of operating systems process relationships and file structures (Windows, Mac, Linux).
- Functional experience developing new detections for alerting platforms
- Expert level knowledge of Cybersecurity attack and defense techniques
- Strong understanding of web authentication flows such as SAML and OAUTH
- In depth knowledge of cloud environments such as AWS and Azure.
- Deep understanding of TCP/IP, DNS, HTTP/S, and packet-level analysis.
- Understanding of living off the land techniques used by adversaries, using tools such as PowerShell, WMIC, Task Scheduler, Windows Registry etc.
MassMutual offers the opportunity to do meaningful work within a purpose-driven organization that values long-term impact over short-term outcomes. In this role, you can expect:
- Clear areas of ownership and accountability, with work that connects directly to company and customer outcomes
- A collaborative environment where perspectives are welcomed
- Access to learning, development, and internal networks that support continuous growth and skill-building over time
- Employee-led communities and forums that foster connection, learning, and inclusion across the organization
- A culture grounded in integrity, responsibility, and stewardship—supported by a company with a strong legacy and a future-focused mindset
If you need an accommodation to complete the application process, please contact us and share the specifics of the assistance you need.
California residents: For detailed information about your rights under the California Consumer Privacy Act (CCPA), please visit our California Consumer Privacy Act Disclosures page.