Insider Threat Management Analyst @MMCTech

We are seeking a talented individual to join our Insider Threat Management (ITM) team at Marsh McLennan (MMC). This role will be based in Cluj, Romania.

Marsh McLennan (MMC) has established its EMEA Technology Hub in Cluj, Romania, reflecting our commitment to innovation and excellence. This hub is central to our digital strategy, addressing emerging challenges and enhancing service delivery through advanced technology solutions that empower our clients and promote sustainable growth.

As an Insider Threat Management Analyst, you will play a crucial role in growing our ITM program. You will be responsible for analyzing security event data, assessing the potential impact of events, and creating recommendations to defend against emerging threats. You will follow security events and alarms through the triage and incident response lifecycle and document all processes in a centralized knowledgebase. Additionally, you will collaborate across multiple teams to strengthen the security posture of Marsh & McLennan Companies.

We will count on you to:

• Work with Security (SIEM, EDR, etc.), Insider Threat, user-entity behavior analytics (UEBA), and/or digital forensics tools;
• Design, build, test, deploy, maintain, troubleshoot, and document the MMC Insider Threat tools, functions, processes, and documentation;
• Serve as a contact for the Insider Threat Management team within MMC;
• Create custom automation to improve the Insider Threat Management team's efficiencies;
• Analyze network traffic, endpoint security events, and other various log sources to identify threats, assess potential impact, and recommend mitigations;
• Support other security functions and teams to ensure the holistic implementation of security controls, technologies, practices, and programs;

What you need to have:

• Undergraduate degree in Computer Science (CS), Computer Information Systems (CIS), other related degrees, or equivalent experience;
• 4+ years of experience in information security and/or experience in security analysis in a non-security focused role;
• Demonstrated experience with Python;
• Excellent critical thinking skills, with proven analytical expertise and the ability to learn adaptively;

What makes you stand out:

• Professional or technical certifications, such as CCITP-F, CCITP-A, Security+, GIAC Certified Incident Handler (GCIH), Certified Ethical Hacker (CEH), or other related certifications;
• Knowledge in one or more of the following domains: Network Operations and Architecture, Operating Systems, Identity and Access Management, Programming, Cloud Computing, Databases, or Cryptography;
• Familiarity with common security frameworks and models, such as MITRE ATT&CK, Lockheed Martin Cyber Kill Chain, The Diamond Model of Intrusion Analysis, and NIST Cybersecurity Framework;

Why join our team:

• We help you be your best through professional development opportunities, interesting work, and supportive leaders;
• We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and have an impact for colleagues, clients, and communities;
• Our scale enables us to provide a range of career opportunities, as well as benefits and rewards to enhance your well-being;
• A yearly budget and the opportunity to build your flexible benefits package (up to 20% of your annual salary);
• 30+ days off (25 legal days off, 1 extra day off on your birthday, public holiday replacement days, extra buy/sell from your benefits budget);
• Performance Bonus scheme;
• Matching charity contributions, charity days off, and the Pay it Forward charity challenge;
• Core benefits - Pension, Life and Medical Insurance, Meal Vouchers, Travel Insurance;

Marsh McLennan is committed to creating a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age, background, disability, ethnic origin, family duties, gender orientation or expression, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, or any other characteristic protected by applicable law.

Marsh McLennan is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh McLennan colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one "anchor day" per week on which their full team will be together in person.