Cyber Security Analyst – CSOC Analysis

The energy of a newsroom, the pace of a trading floor, the buzz of a recent tech breakthrough; we work hard, and we work fast, while keeping up the quality and accuracy we are known for. It is what keeps us inventing and reinventing, all the time. Our culture is wide open, just like our spaces. We bring out the best in each other through collaboration. Through our countless volunteer projects, we also help network with the communities around us. You can do amazing work here. Work you could not do anywhere else. It is up to you to make it happen.

About the Role

We are hiring a Cyber Security Analyst – Analysis to support a global, 24x7 Cyber Security Operations Center (CSOC). This role focuses on front‑line security event analysis and decision‑making, acting as the initial responder to alerts while independently resolving security events using established playbooks and sound professional judgment.

This position is well‑suited for analysts who enjoy hands‑on investigation, can confidently move beyond basic alert review, and know when and how to escalate issues with clear context. The role does not require full incident response ownership but plays a critical role in determining what requires deeper investigation and escalation.

What You Will Do

• Act as the initial responder to security alerts and events across enterprise systems, endpoints, networks, and cloud environments
• Perform event analysis and analysis using documented playbooks, runbooks, and standard operating procedures
• Apply experience‑based judgment when alerts are unclear, incomplete, or fall outside existing procedures
• Validate alerts, identify false positives, and assess severity, scope, and potential business impact
• Conduct initial investigation and contextual analysis to support accurate decision‑making
• Independently resolve and close security events, requesting assistance as needed
• Escalate confirmed or high‑risk incidents with clear, detailed, and actionable case notes
• Analyze logs and telemetry from multiple sources, including SIEM, endpoint, network, identity, and cloud platforms
• Collaborate with internal technical and business teams to support remediation and resolution
• Maintain high‑quality documentation, including investigation notes and shift handovers
• Contribute feedback to improve detection logic, playbooks, and analysis workflows
• Stay current on emerging cyber threats, attacker techniques, and defensive best practices

Required Experience & Skills

• Experience in a Security Operations, SOC, CSOC, or security analysis role
• • Minimum 1 year of experience
• Strong proficiency in log analysis across multiple data sources (SIEM experience required; Splunk preferred)
• Solid understanding of:
• • Enterprise networking concepts and the TCP/IP stack
  • Endpoint and network security controls
  • Windows, Linux, and macOS operating systems
• Familiarity with security technologies such as EDR, antivirus, firewalls, VPNs, and identity systems
• Ability to follow playbooks while adapting confidently when procedures are incomplete or unavailable
• Comfortable working independently, prioritizing alerts, and making escalation decisions
• Clear written and verbal communication skills, particularly for investigation documentation
• A professional, customer‑focused approach when working with internal stakeholders

Preferred Qualifications

• Experience working in a 24x7 SOC or CSOC environment
• Exposure to cloud platforms such as AWS, Azure, or GCP
• Experience with event correlation, enrichment, or alert tuning
• Familiarity with scripting or automation (e.g., Python, PowerShell, Bash)
• Relevant security certifications (e.g., Security+, GCIH, GCED, or similar)
• Degree or formal training in information security, computer science, or a related field

If indicated, please note that years of experience are a guide; we will consider applications from all candidates who can demonstrate the skills necessary for the role.

Discover what makes Bloomberg unique - watch our podcast series for an inside look at our culture, values, and the people behind our success.

Accommodations

Bloomberg provides reasonable adjustment/accommodation to individuals with disabilities. Please tell us if you require a reasonable adjustment/accommodation to apply for a job. Examples of reasonable adjustment/accommodation include but are not limited to making a change to the application process or work procedures, providing documents in an alternate format or using specialized equipment. To request an adjustment/accommodation to apply for a job, please email AMER_recruit@bloomberg.net (Americas), EMEA_recruit@bloomberg.net (Europe, the Middle East and Africa), or APAC_recruit@bloomberg.net (Asia-Pacific), based on the region you are submitting an application for. We may share your information with a third party provider of accommodations services who may use this information to reach out to you for the purposes of accommodating your application.

Equal Opportunity

Bloomberg is an equal opportunity employer and prohibits discrimination in employment. It is Bloomberg’s policy to provide equal opportunity and access for all persons, and the Company is committed to attracting, retaining, developing, and promoting the most qualified individuals without regard to age, ancestry, color, gender identity or expression, genetic predisposition or carrier status, marital status, national or ethnic origin, race, religion or belief, sex, sexual orientation, self-identified or perceived sex, sexual and other reproductive health decisions, parental or caring status, physical or mental disability, pregnancy, childbirth or related medical conditions, or parental leave, protected veteran status, status as a victim of domestic violence, or any other classification protected by applicable law (each, a “Protected Characteristic”). Bloomberg prohibits treating applicants or employees less favorably in connection with the terms and conditions of employment, in all phases of the employment process, because of one or more Protected Characteristics.