Yum! Brands Logo

Yum! Brands

Sr. IT Security Analyst

Posted 2 Months Ago
Be an Early Applicant
Hybrid
Plano, TX
101K-116K Annually
Senior level
Hybrid
Plano, TX
101K-116K Annually
Senior level
Serve as primary SIEM/SOC escalation point: investigate and triage network security events, document findings, communicate with stakeholders, tune detections, oversee threat and vulnerability management, implement automations with platform teams, and lead brand collaboration calls. Provide incident response, threat intelligence analysis, and occasional on-call support across a global enterprise.
The summary above was generated by AI

As a Senior Information Security Analyst supporting the Yum! Cybersecurity team, as an individual contributor, you will serve as the primary escalation point for the Security Information and Event Management (SIEM) platform, and the Security Operations Center (SOC). This is a global role within the world’s largest restaurant company. More specifically, within the Security Services organization that services over 53,000 restaurants, as well as the infrastructure, systems, and cloud solutions it takes run a large-scale distributed enterprise across 150+ countries and growing.

 As a Senior Information Security Analyst, you will frequently have interactions with members of all brand Security and IT teams as well as the third parties who provide the platforms that the services operate on. While working in a dynamic, global environment, you will be responsible for responding to, researching, and addressing network security events. Your primary duties will allow you to use your in-depth technical knowledge to enhance the security posture of our internal systems and third-party solutions. Occasional on-call duties may be required.

Responsibilities
  • Your primary work will involve using our SIEM platform to fully investigate network security events, documenting your investigations in writing via ticketing system, communicating with stakeholders, and resolving any identified issues. 
  • Gather and analyze intelligence from a variety of sources and communicate a summary of impactful intelligence to internal stakeholders. 
  • You will be responsible for identifying tuning opportunities and additional SIEM rules/use cases based on the everchanging threat landscape and needs of the organization.
  • Provide threat and vulnerability management oversight and communicate threat and vulnerability observations clearly to leaders and subject matter experts, properly relaying risk factors. 
  • You will work with other Subject Matter Experts within the Security Services team to deliver a unified security service experience to all markets while also leveraging each other’s expertise and services to improve existing processes.
  • You will work closely with the Log Collection and Platform management team to identify and implement automations for common use cases for more efficient response and resolution.
  • You will lead brand collaboration calls to highlight detections identified within the market, including details such as resolution status and follow up, to ensure events are fully documented and resolved. 
Qualifications
  • Effective tactical and strategic communication skills with technical, non-technical, and executive leadership.
  • 1 to 3 years’ experience of working in a high-performance Cyber SOC team in a cyber-security
  • College Degree in Cyber Security or Information Technology or equivalent work experience. 
  • Certifications like CCNA, Security+, Network+, GCIH, GSOC, GSEC, GSED, GMON focused organization serving large scale enterprise customers
  • Experience with an enterprise-grade SIEM platform (e.g. QRadar, LogRhythm, CrowdStrike) 
  • Working knowledge in network access control, intrusion prevention & detection systems, firewalls, routers, incident response, information security methods & risk management 
  • Working knowledge of the Cyber Kill Chain 
  • Experience in high volume environments handling billions of records per day 
  • Experience in Security Event analysis & triage, incident handling & root-cause identification 
  • Proficiency in TCP/IP & other network protocols
  • Passion and enthusiasm for Cyber Security
  • Experience with Red/ Blue team exercises & Table Top exercises
  • Experience running of one or more services within a Security Operations Center
  • Excellent time management & problem-solving skills
  • Effective Communication, including verbal, report writing & presentations skills 
  • Ability to deal with complexity & uncertainty
  • Analysis & interpretation of data into useful management 

Salary Range: $­­100,500 to $115,800 annually + bonus eligibility. This is the expected salary range for this position. Ultimately, in determining pay, we'll consider the successful candidate’s location, experience, and other job-related factors.

Benefits: Employees (and their eligible family members) may enroll in the following types of insurance coverage: medical, dental, vision, legal, and accidental death and dismemberment, as well as FSA/HSA (depending on enrolled medical plan). Yum! also provides short-term disability, long-term disability, and life insurance. Employees may enroll in our 401(k) plan. Yum! provides 4 weeks of vacation, paid sick leave, 10 paid holidays, a floating day off and 2 paid days for volunteer time each calendar year. To learn more about working at Yum! -Click here. 

At Yum!, one of our core values is to Believe in ALL People. This means seeing the value in everyone and unlocking their full potential to be their best self. YUM! Brands, Inc. (including its subsidiaries Yum Restaurant Services Group, LLC (“YRSG”) and Yum Connect, LLC (“Yum Digital and Technology”)(collectively, “Yum”) is proud to be an equal opportunity employer and is committed to equity, inclusion, and belonging for all dimensions of diversity.  We do not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other protected characteristic. Yum! is committed to working with and providing reasonable accommodation to applicants with disabilities or special needs.

US Job Seekers/Employees - Click here to view the “Know Your Rights” poster and supplement and the Pay Transparency Policy Statement.

Similar Jobs

2 Days Ago
In-Office
86K-149K Annually
Senior level
86K-149K Annually
Senior level
Information Technology • Software
Leads advanced cybersecurity activities, including threat detection, incident response, access control monitoring, security policy development, risk assessments, audits, and recovery efforts. Evaluates security tools, prepares technical reports, delivers advanced training, and guides junior team members. The role requires familiarity with SOC 2, ISO 27001, PCI DSS, and NIST-based audits and assessments, along with effective use of AI and agents to improve productivity.
Top Skills: Access Control SystemsAINetwork Security
Senior level
Edtech
Analyzes university information systems, policies, and processes to identify security gaps and develop remediations. Monitors cyber defense activity, investigates incidents, assesses risks, maintains security policies, coordinates audits, and supports compliance with TAC 202, PCI, HIPAA, and other requirements. Leads security remediation projects, awareness training, security assessments, and related technology or process improvements while providing incident support, reports, and briefings.
Top Skills: AgileCisaCisspComptia Security+HipaaIso 27001ItilMitre Att&CkMitre ShieldNist 800-171Nist 800-53PciPmpSix SigmaSscpTexas Administrative Code 202
26 Minutes Ago
In-Office
124K-285K Annually
Senior level
124K-285K Annually
Senior level
Artificial Intelligence • Cloud • Information Technology • Consulting
Leads HPE’s cross-functional governance program for third-party firmware across infrastructure and computing products. Establishes firmware lifecycle processes, supplier accountability, cybersecurity and compliance requirements, ownership models, customer support practices, risk management, and executive governance. Coordinates Engineering, Product Security, Procurement, Supply Chain, Quality, Services, Product Management, and suppliers to ensure firmware is secure, traceable, supportable, and managed throughout its lifecycle.
Top Skills: Embedded SystemsFirmwareFirmware SigningSbomsSecure DevelopmentSupply-Chain SecurityVulnerability Management

What you need to know about the San Francisco Tech Scene

San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.

Key Facts About San Francisco Tech

  • Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Google, Apple, Salesforce, Meta
  • Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
  • Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
  • Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
  • Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account