Associate, Security Operations Centre

Associate Security Operations Center (SOC)

Enterprise Cyber Security | MassMutual | 5–8 Years of Experience

About MassMutual
Massachusetts Mutual Life Insurance Company (MassMutual) is a leading mutual life insurance company operated for the benefit of its members and participating policyowners. We help people secure their futures and protect the ones they love through a broad portfolio of insurance, retirement, and financial solutions.

The Opportunity

As a Senior SOC Analyst, you will join MassMutual’s Cyber Fusion Center and help protect the company’s data, systems, employees, customers, and policyowners. You will work with security analysts, engineers, Threat Intelligence, Offensive Security, Security Platforms, Network Security, Endpoint Security, and Identity and Access Management teams to detect, investigate, contain, and communicate cyber threats.

The Impact

• Monitor and investigate alerts across enterprise endpoints, networks, identity systems, email, applications, cloud platforms, and SaaS services.

• Lead complex investigations by correlating SIEM, EDR/XDR, network, cloud, identity, and threat-intelligence telemetry.

• Determine scope, impact, attack path, and root cause; recommend and coordinate containment, eradication, and recovery actions.

• Serve as an escalation point for analysts, provide technical guidance, and ensure high-quality case documentation and shift handoffs.

• Conduct proactive threat hunting using hypotheses, behavioral analytics, threat intelligence, and the MITRE ATT&CK framework.

• Develop and tune detection logic, correlation rules, dashboards, and response playbooks to improve coverage and reduce false positives.

• Identify opportunities for SOAR and agentic automation that improve response speed, consistency, and analyst efficiency.

• Support malware triage and analysis; extract and operationalize indicators of compromise and attacker behaviors.

• Prepare concise incident updates, investigation reports, lessons learned, and metrics for technical and leadership stakeholders.

• Partner with detection engineering, incident response, forensics, vulnerability management, cloud security, and infrastructure teams to address control gaps.

Minimum Qualifications

• 5–8 years of progressive experience in security operations, incident response, threat detection, threat hunting, digital forensics, or a closely related discipline.

• Hands-on experience with an enterprise SIEM and EDR/XDR platform, including advanced querying, investigation, and alert tuning.

• Strong understanding of Windows and Linux internals, networking, authentication, Active Directory or modern identity platforms, and common attacker techniques.

• Experience investigating threats across on-premises and cloud environments, including at least one major cloud platform.

• Working knowledge of phishing, credential abuse, malware, ransomware, lateral movement, persistence, data exfiltration, and insider-risk scenarios.

• Ability to analyze logs, endpoint telemetry, network traffic, and threat intelligence and convert findings into defensible response decisions.

• Automation or scripting capability using Python, PowerShell, SQL, KQL, SPL, or a comparable query language.

• Strong written and verbal communication skills, including the ability to explain technical risk and business impact clearly.

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.

Preferred Qualifications

• Experience with SOAR playbook development, detection-as-code, security data engineering, or applied AI/agentic capabilities in SOC workflows.

• Experience in a large, regulated, global enterprise or financial-services environment.

• Knowledge of NIST incident-response practices, cyber kill chain concepts, and MITRE ATT&CK mapping.

• Relevant certifications such as CISSP, GIAC, SC-200, CompTIA CySA+, or equivalent technical credentials.

• Experience mentoring analysts, improving operational procedures, and contributing to purple-team or detection-validation exercises.

What Success Looks Like

• High-quality, timely investigations with clear evidence, risk assessment, and recommended actions.

• Reduced alert noise and measurable improvement in detection coverage, response time, and playbook effectiveness.

• Consistent collaboration and communication across global SOC shifts and partner teams.

• Actionable lessons learned that strengthen controls and reduce repeat incidents.

Core Competencies

Accountability, agility, continuous learning, communication excellence, resilience, self-awareness, sound judgment, and the courage to act in difficult situations.

Work Expectations