Search Remote Jobs

Senior Cyber Security Analyst – Incident Response

🔥 2 minutes ago

🌵 Arizona, North Carolina, +1 more states – Remote

infoinfo

💵 $140k - $188k / year

⏰ Full Time

🟠 Senior

🔐 Security Analyst

Where this job comes from

Posted on First Citizens Bank's careers page, not through a job board

First seen by Remote Rocketship 2 minutes ago

Logo of First Citizens Bank

First Citizens Bank

10,000+ employees

🏥 Healthcare

🏭 Manufacturing

📦 Logistics

💰 Post-IPO Debt on 2021-05

Healthcare • Manufacturing • Logistics

First Citizens Bank is a comprehensive financial institution offering a wide range of services to individuals, families, businesses, and nonprofits. Their offerings include personal and commercial banking services, loans, mortgages, investment solutions, and insurance products. Known for their commitment to customer service and financial expertise, the bank serves a variety of sectors including agribusiness, healthcare, and manufacturing, ensuring tailored financial solutions for their clients.

📋 Description

• Investigate SIEM/SOAR events and respond to and contain incidents using malware analysis, network security, and endpoint security expertise • Lead incidents and coordinate technical investigation, mitigation, and remediation • Liaise with technical and business stakeholders • Ensure information security incidents are detected, documented, investigated, and resolved • Create countermeasures and mitigations in response to incidents • Provide operational inputs to threat hunting following incidents or events • Build countermeasures and mitigations addressing commodity and targeted threats • Track evolving threat actor techniques • Provide post-incident recommendations to improve communication, processes, procedures, and mitigation options • Support Threat Hunting, Intelligence, and Monitoring functions through content creation, threat analysis, detection recommendations, and colleague mentoring • Work to restore operations during cyber incidents

🎯 Requirements

• Bachelor's Degree and 8 years' experience OR High School Diploma or GED/Equivalent and 12 years' experience in Information Security • 2+ years of Threat Hunting experience preferred • Familiarity with MITRE ATT&CK and its application to countermeasure creation is a plus • Experience analyzing, dispositioning, and escalating security events across systems, applications, networks, authentication, and email • Experience translating threat actor techniques into mitigations using YARA, Sigma, or regular expressions • Ability to define security requirements and drive project deliverables • Ability to track multiple incidents and ensure timely responses • Experience responding to cloud-related incidents in Azure, AWS, and Google Cloud • Cloud administrative experience preferred • 3+ years of Cyber Incident Response experience required, with Incident Response as the primary job function • Participation in a weekly afterhours on-call rotation required • Strong communication skills and ability to explain complex issues to broader audiences

🏖️ Benefits

• Variable incentives, bonuses, benefits, and/or other awards may be included in total compensation • Competitive, thoughtfully designed and quality benefits program • Afterhours on-call rotation participation

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Similar Jobs

🔥 1 hour ago

Dexis Consulting Group

501 - 1000

📦 Logistics

🏥 Healthcare

⚖️ Legal

AM&E Analyst supporting DSCA security cooperation assessment, monitoring, and evaluation programs at Dexis. Conducting research, field evaluations, data analysis, and strategic guidance.

🔥 2 hours ago

Purdue University College of Health and Human Sciences

501 - 1000

🏥 Healthcare

🏨 Hospitality

💼 Consulting

Senior IT security analyst securing Purdue University’s Banner ERP and access systems. Designing role-based controls, supporting upgrades, audits, compliance, and security automation.

🔥 8 hours ago

GovCIO

1001 - 5000

💼 Consulting

🏛️ Government

🔒 Cybersecurity

Data Security Analyst securing GovCIO’s enterprise networks, cloud environments, and data infrastructure. Leading Palo Alto, Cisco, Cortex, firewall, segmentation, and incident-response operations.

🕒 Yesterday

Rhymetec

11 - 50

🔒 Cybersecurity

📋 Compliance

🤝 B2B

Senior Cyber Security Analyst supporting Rhymetec’s client compliance and cybersecurity programs. Managing security frameworks, cloud controls, audits, questionnaires, and tabletop exercises remotely.

🕒 2 days ago

Blackthorne Consulting

11 - 50

🔒 Cybersecurity

💼 Consulting

🤖 Artificial Intelligence

Threat Intelligence Analyst researching adversaries and engineering automation for Blackthorne, a mission-focused consulting organization. Delivering actionable intelligence to improve clients’ detection, response, and risk awareness.

Developed by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok