• Serves as the first line of security alert escalation and guidance for IT Security Analysts. • Performs essential duties with minimal supervision for one or multiple areas of the IT Security Program such as vulnerability management, security awareness, threat intelligence, etc. • Monitor data activity and investigate alerts related to data exfiltration, inappropriate access, and policy violations. • Investigate security incidents involving sensitive data, including unauthorized access and data leakage. • Partner with the Incident Response team to contain, remediate, and document data-related incidents. • Develop and maintain runbooks for data protection incident handling and escalation. • Works closely with IT Security Engineers to draft runbooks, tune alerts, collaborate on escalations, and generate ideas for new alerting. • Acts as lead for small projects by IT Security Manager and/or Director as needed. • Conducts network monitoring and intrusion detection analysis using various computer network defense tools, such as intrusion detection/prevention systems, firewalls, and host-based security systems. • Conducts log-based and endpoint-based threat detection to detect and protect against threats coming from multiple sources. • Deploys cloud-centric detection to detect threats related to cloud environments and services used by the organization. • Correlates activity across assets (endpoint, network, apps) and environments (on-premises, cloud) to identify patterns of anomalous activity. • Reviews alerts and data from sensors, and documents formal, technical incident reports. • Works with threat intelligence and/or threat-hunting teams. • Provides network subscribers with incident response support, including mitigating actions to contain activity and facilitating forensics analysis when necessary. • Works with security information and event management (SIEM) to manage/tune the system, create/manage the detection content and actively watch for alerts. • Correlates network, cloud, and endpoint activity across environments to identify attacks and unauthorized use. • Researches emerging threats and vulnerabilities to aid in the identification of incidents. • Supports network vulnerability scans, security audits, and risk assessments and provides feedback to ensure compliance with corporate security policies and adherence to industry best practices. • Provides users with incident response support, including mitigating actions to contain activity, and facilitating forensics analysis when necessary. • Performs security standards testing against computers before implementation to ensure security.

• Patrol the firm’s networks, review security audits and logs, and regularly verify the cybersecurity controls in place as part of the firm’s Information Security Management System • Participate in assessing the cybersecurity of the firm’s vendors and contractors as well as respond to client reviews of the firm’s cybersecurity posture • Be prepared to respond nimbly and effectively to possible cyber incidents • Provide incident investigation, handling and documentation; and ensure remediation steps timelines are understood • Remain abreast of the latest cybersecurity news, including assessing the implications for the firm’s systems of newly-identified vulnerabilities • Maintain expertise on the evolving tactics, techniques, and procedures of sophisticated malicious cyber actors • Supports cybersecurity awareness program by explaining policies and best practices, developing training materials, and advising users on secure solutions to business problems

• Analyze, maintain, and manage GoodLife security systems to ensure secure production and development environments • Escalate or respond to incidents as required • Involved in audit and compliance processes, and provide reporting for compliance and investigation • Maintain accurate security systems hardware and software inventories • Maintain and update security systems • Review and action on security system reports • Investigate and respond to security system alerts • Run manual scan jobs as required (Asset, Virus, Vulnerability, etc.) • Perform and maintain backups of security system configurations • Create and respond to Helpdesk security tickets as assigned • Assist with security project work as required • Work and collaborate with various vendors and GoodLife partners • Collaborate with T&I operations to implement and deploy new security systems • Involved in the process of selecting security systems • Keep up to date with the latest security trends and news • Daily, Weekly, Monthly review of various reports and scan jobs • Create and maintain security operational documentation

• Synthesize large volumes of complex, multi-source intelligence into concise, executive-level briefings, ensuring senior leaders can quickly understand key risks, implications, and recommended actions • Conduct advanced open-source intelligence (OSINT) investigations • Monitor, analyze, and track evolving threat trends • Develop and maintain intelligence metrics, KPIs, and performance measures, ensuring intelligence activities are measurable, actionable, and aligned to business objectives • Rapidly translate vague or incomplete intelligence requirements into high-confidence, sourced analytic findings • Assess reputational, geopolitical, and socio-political threats and evaluate how they may materialize and impact the organization and broader industry • Analyze the origin, motivation, intent, and evolution of threat actors and narratives within regional geopolitical and cultural contexts • Utilize intelligence platforms such as LifeRaft Navigator, Recorded Future, and other OSINT and threat intelligence tools to support investigations, monitoring, and analysis • Support time-sensitive intelligence requirements during fast-moving geopolitical events or emerging situations • Collaborate closely with other analysts to advance investigations, validate findings, and integrate insights across intelligence efforts • Participate in analytic reviews and lessons-learned sessions to continuously refine sourcing strategies, methodologies, and tradecraft