Before you apply to a job, select your language preference from the options available at the top right of this page.

Explore your next opportunity at a Fortune Global 500 organization. Envision innovative possibilities, experience our rewarding culture, and work with talented teams that help you become better every day. We know what it takes to lead UPS into tomorrow—people with a unique combination of skill + passion. If you have the qualities and drive to lead yourself or teams, there are roles ready to cultivate your skills and take you to the next level.

Job Description:

LEAD CYBER INTELLIGENCE ANALYST - REMOTE

GRADE 30F

The Lead Cyber Intelligence Analyst on the Security Operations Center (SOC) team fulfills a critical cyber security role in protecting the UPS Enterprise against cyber threats and supports operational readiness. The SOC Lead analyst is the Subject Matter Expert (SME) on the monitoring of security events to protect UPS Enterprise and information systems. Responsibilities include providing guidance and training to SOC analysts, and reporting to Management and Senior InfoSec Leaders about current incident handling and incident response efforts. They also include: directing multiple incident-based activities and tasks, actively participating in a broad range of complex technical and professional functions to identify, investigate, analyze, contain and remediate information security events and incidents, and providing recommendations on cyber security defensive posture configurations to Senior InfoSec Leadership.


The Lead Cyber Intelligence Analyst influences and provides technical expertise in a broad range of complex technical and professional functions related to Security Operations. He/She applies data science principles to security events and incidents to identify gaps to facilitate the creation of new and advanced methods of detection. This position leverages Security Operations Control (SOC) analytical findings to create actionable threat intelligence to influence changes to the information security posture. The Lead Cyber Intelligence Analyst is the Subject Matter Expert on the monitoring of security events to protect enterprise and information assets. He/She directs multiple incident-based activities and tasks, guides and influences the department and project teams, and trains colleagues to improve their skillsets and knowledge. This position works with upper management to recommend and implement changes to the Intelligence and Incident Response program.

QUALIFICATIONS:

• 5+ years as an analyst, preferably from a Security Operation Center (SOC), including Incident Response and Handling roles.
• Lead incident response efforts, especially when high-level cyber threats or incidents are identified.
• Experience with cybersecurity tools (e.g., SIEM/SOAR platforms, threat intelligence platforms, endpoint detection tools).
• Hands-on experience with incident response and understanding of attack vectors and common cybersecurity vulnerabilities.
• Experience with multi-cloud technologies such as Google Cloud, Azure and AWS
• Expert understanding of network protocols, TCP/IP fundamentals, operating systems along with log, network and system security analysis techniques.
• Clear and concise communication and presentation of complex and complicated security topics
• Expert knowledge of security exploitation trends and methodologies to identify anomalous patterns.
• Proven experience leading a team of highly specialized professionals to accomplish difficult tasks.
• Proven ability to present highly technical information to Decision Makers and Stakeholders
• Education: Bachelor’s Degree Required - Master’s Degree Preferred
• Certifications: Multiple GIAC Required

Last Day Posted Internally: 12/31/25

Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from$104,460/year to $193,5600/year. Pay is based on several factors including but not limited to, market location and may vary depending on job-related knowledge, skills, and education/training and a candidate’s work experience. Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company’s performance. Hired applicants may be eligible for Medical/prescription drug coverage, Dental coverage, Vision coverage, Flexible Spending Account, Health Savings Account, Dependent Care Flexible Spending Account, Basic and Supplemental Life Insurance & Accidental Death and Dismemberment, Disability Income Protection Plan, Employee Assistance Program, 401(k) retirement program, Vacation, Paid Holidays and Personal time, Paid Sick and Family and Medical Leave time as required by law, and Discounted Employee Stock Purchase Program.

Employee Type:

Permanent

UPS is committed to providing a workplace free of discrimination, harassment, and retaliation.

Other Criteria:

UPS is an equal opportunity employer. UPS does not discriminate on the basis of race/color/religion/sex/national origin/veteran/disability/age/sexual orientation/gender identity or any other characteristic protected by law.

Basic Qualifications:

Must be a U.S. Citizen or National of the U.S., an alien lawfully admitted for permanent residence, or an alien authorized to work in the U.S. for this employer.