Senior Information Security Analyst

Senior Information Security AnalystServing the needs of all families with young children, Carter's Inc. is the largest North American apparel retailer exclusively for babies and young children, encompassing Carter's, OshKosh B'gosh, Skip*Hop and Little Planet brands. Meaningful work, constant learning, genuine people, and a community guided by core values that promote inclusion and innovation is in everything we do.

There are many reasons to build your career at Carter's.How you'll make an impact:The Senior Information Security Analyst is a member of the IT Security team reporting to the Sr. Manager, IT Security. The Senior Information Security Analyst is primarily focused on leading complex investigations, driving departmental improvement efforts on monitoring, detecting, administration, or responding to security events and threats across the organization.

Working under general supervision, this role exercises considerable independent judgment and takes ownership of advanced cyber security activities. The Senior Information Security Analyst is a key technical contributor and a bridge between operational execution and strategic security initiatives. This position could also serve as a foundation for building deeper expertise in various other security domains.Key ResponsibilitiesDepending on the needs of the department, the duties of this role could include:Security monitoring & day-to-day operations (30%)Day-to-day information security analysis across events, alerts, and threatsSupporting the security manager with vulnerability, alert, and incident oversightStaying current on the threat landscape and zero-day vulnerabilitiesTranslating threat intelligence into actionable detection and defense improvementsReporting, Metrics and dashboardingVulnerability & risk management (20%)Leading threat & vulnerability management (TVM) activitiesRisk prioritization, remediation tracking, and stakeholder reportingRepresenting the security team in audits and regulatory compliance activitiesContributing to security policy, standards, and procedure developmentIncident response & digital forensics (15%)Leading investigation and response to high-severity and complex security incidentsDriving containment through post-incident review and lessons learnedPerforming digital forensic investigations on endpoints, servers, and cloud environmentsConducting static and dynamic malware analysis to understand attacker TTPsThreat detection & hunting (15%)Proactive threat hunting using behavioral analytics and hypothesis-driven methodologiesDeveloping and maintaining threat models for critical business systems and data assetsMentoring and coaching junior analysts on threat analysis and detection techniquesSecurity engineering & architecture (20%)Collaborating with IT, DevOps, and business teams to integrate security into system designEvaluating and recommending new security technologies, tools, and vendorsParticipating in proof-of-concept testing for new security solutionsWe'd Love to hear from you if: (Requirements section)Must have:At least a bachelor's degree in computer science or related field2+ years of IT, email and cloud security, IT networking and/or network security experienceExperience working with SIEM, EDR, and/or IAM toolsAbility to meet deadlines and work with management across various disciplinesProficiency with log analysis at scale and big data security analytics.Ability to perform on-call duties during off-hours and holidaysAn adaptable and flexible attitude towards changing business needsPreferred skills and experience:Knowledge of application security concepts and secure SDLC practices.Experience with red team or penetration testing activities.Exposure to regulatory compliance frameworks (PCI DSS, HIPAA, SOC 2, GDPR).Experience in a cloud-native or hybrid-cloud enterprise environment.Security +, ISC2 CC, CompTIA A+, CompTIA Network +, SSCP or CCT certificationsCarters is committed to creating a diverse environment and is proud to be an equal opportunity employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity, sexual orientation, national origin, genetics, disability, age, veteran status, or any other status protected by federal, state, or local law.