Skip to main content
Bloomberg's Cyber Security Operations Center (CSOC) is hiring a PTO (Process & Technology Optimization) staff member to design, build, and integrate scalable process and technology solutions that improve cyber security operations.
Responsibilities: Own one or more CSOC technology and process areas (examples: Network Security, EDR, Cloud, AI, Telemetry ) and manage/integrate associated vendor products Represent CSOC to external stakeholders and ensure solutions align with CSOC vision through ongoing oversight Identify systemic cybersecurity operations issues, document resolution methods, and coordinate with management to prioritize enterprise remediation Formalize and disseminate security operations best practices to make operations more repeatable Pilot and evaluate emerging technologies to determine practical adoption Mentor PTO and broader CSOC staff earlier in their careers, supporting growth toward greater ownership over time Work closely with CSOC functions including Event Analysis, Threat Hunting, Incident Response, Detection Engineering, and Threat Intelligence to understand blockers and mission challenges Transform CSOC operations to improve analyst speed, capabilities, and coverage using automation and new controls, technologies, or processes Identify, collect, and surface measurable metrics from PTO-managed products to enable data-driven process improvement across CSOC Design and prioritize scalable, robust, and innovative process and technology solutions Validate, reframe, and adapt user-originated solutions to ensure alignment with overall vision and an ideal execution and maintenance path (self-initiated, engineering-managed, or vendor-designed) When appropriate, design, execute, and maintain internally built products using code or Low Code/No Code options (including SOAR ) Build tooling and processes that surface the right information when needed; default to direct product access only when it is not practical Oversee development and implementation of technical solutions, ensuring quality standards and delivery timelines are met Requirements 5+ years of experience in engineering, systems design, or a cybersecurity operations center role (analyst, detection engineer, security engineer, or incident responder) Experience with data storage and retrieval systems (examples: SIEM, databases, data lakes) Ability to analyze complex processes and identify optimization opportunities Ability to quickly learn new technologies and products in a frequently evolving security landscape Experience with or exposure to automation and Low Code/No Code platforms such as SOAR Experience managing vendor relationships or driving delivery through external engineering or product teams Proven ability to break down complex technical and operational problems into components Creative, strategic mindset focused on ambitious improvements Inquisitive, attentive listening style Clear and concise written and verbal communication Expert knowledge sharing by acquiring key context and communicating it effectively to other team members Experience providing feedback, coaching, or mentorship Technologies SIEM Databases Data lakes SOAR EDR Python Low Code/No Code GenAI Threat Intelligence Platforms Email Analysis Malware Sandboxing Network Intrusions Detection Data Loss Prevention IaaS PaaS SaaS Benefits Health insurance Dental insurance Vision insurance Short and long term disability benefits 401(k) + match Life insurance Paid holidays Paid time off Various wellness programs Merit increases Incentive compensation (exempt roles only) We'd love to see 7+ years of experience working in or with a cybersecurity operations center (analyst, detection engineer, security engineer, or incident responder) 7+ years of experience as a security engineer supporting or designing security operations systems, including capabilities such as EDR, Threat Intelligence Platforms, Email Analysis, Malware Sandboxing, Network Intrusions Detection, and Data Loss Prevention Python or scripting skills sufficient to design and build custom integrations, or extend automation platforms beyond built-in capabilities Experience protecting cloud infrastructure (IaaS, PaaS, SaaS), operating security tooling running in the cloud, or applying GenAI capabilities to security use cases Location: New York, NY (onsite)
Salary: USD 190,000 - 260,000 per year

Also on the board Same function, level within a rung

Level

Lead

Location

New York, NY

Occupation

Computer Systems Engineers/Architects

Industry

Computer Systems Design Services

Posted

4 days ago

Apply for this role (opens in a new tab)