Information Security Consultant, Digital Forensics & Incident Response

About MassMutual

Massachusetts Mutual Life Insurance Company (MassMutual) is a leading mutual life insurance company operated for the benefit of its members and participating policyowners. We help people secure their futures and protect the ones they love through a broad portfolio of insurance, retirement, and financial solutions.

The Opportunity

The Digital Forensics & Incident Response (DFIR) team is part of MassMutual's Security Operations Center (SOC) / Cyber Fusion Center — the firm's internal security monitoring, detection, and response organisation tasked with detecting and responding to threats on the firm's network. We are looking for a strong cyber security professional to join a highly technical security team — someone with a combination of experience and education in cyber incident response, threat detection and response, digital forensics, and red team / blue team support. You will work in close collaboration with fellow security analysts, engineers, and IT security specialists across the Security Operations Center, Threat Intelligence, Offensive Security, Security Platforms Support, Network Security Engineering, Endpoint Security, and Identity and Access Management teams.

The Impact

• Investigate various types of cyber security incidents.
• Conduct detailed endpoint and network forensic data analysis as part of an investigation.
• Develop new detection capabilities to identify malicious activity.
• Take on specialized projects to enhance the team's capabilities and security toolsets.
• Perform in-depth malware analysis.
• Mentor junior security analysts and help them acquire new security skills.

Minimum Qualifications

• Bachelor's degree.
• 8+ years of experience in cyber security incident response or a related field.
• Ability to work a Monday–Friday shift 10 AM – 7 PM, with on-call rotation.

Preferred Qualifications

• A well-rounded understanding of endpoint, network, and cloud defenses and detection methodologies, forensics, and incident response, together with some offensive security experience to think like an adversary.
• Incident handling experience, including conducting or managing incident response from small-scale to large-event coordination in a complex enterprise environment.
• Endpoint and network forensic analysis, including analysis of relevant logs and data using a variety of forensic analysis tools.
• Offensive security experience, with the ability to think like an adversary when threat hunting and responding to incidents.
• Threat detection and response experience, including the ability to identify gaps in alerting and develop new alert logic.
• Knowledge of current security threats, techniques, and the threat landscape.
• Ability to take a security event, perform analysis, and piece together the overall narrative of a potential compromise.
• Experience with system administration in a large enterprise environment, including Windows, macOS, and Linux servers and workstations, network administration, and cloud administration.
• SANS certifications such as GCIH, GCFA, GCFE, or GREM (helpful).
• Experience with penetration testing labs (such as Hack The Box or Capture the Flag challenges).
• Ability to perform static and dynamic malware analysis to understand the nature of malware.
• Bachelors Degree in Computer Science, or a college degree in a cyber security–related field.
• A passion to learn and a self-driven desire to keep abreast of the latest cyber security threats and hacking techniques.
• Advanced problem-solving skills and the desire to get hands-on.
• Strong verbal, written, and interpersonal communication skills.
• Strong project management skills.

What Success Looks Like

• High-quality, timely forensic investigations with clear evidence, scope, root cause, and recommended actions.
• New and improved detection capabilities that measurably increase coverage and reduce time to detect and respond.
• Thorough malware analysis that produces actionable indicators and strengthens defenses.
• Junior analysts who grow in capability through consistent mentoring and knowledge sharing.

Core Competencies

Accountability, agility, continuous learning, communication excellence, resilience, self-awareness, sound judgment, and the courage to act in difficult situations.

Work Expectations

The SOC supports continuous global monitoring and response through a follow-the-sun operating model. This role provides coverage aligned to business hours and may include on-call support and critical-incident response as required. You can expect regular collaboration with the Security Operations Center, focused one-on-one time with your manager, and access to learning content on Immersive, InfoSkills, SANS, and other informational platforms. Your ethics and integrity will be valued by a strong, stable, and ethical business. Specific location and work arrangement will be confirmed by the hiring team.