Cyber Security Analyst - Associate

6AM City, LLC; North Carolina; Hybrid; USD 90,000 - 140,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

SMBC Group is seeking a cybersecurity professional to monitor, investigate, and respond to security alerts across the enterprise. You will conduct root-cause analysis, expand threat hunting, and help improve detection capabilities within a diverse, global environment.

Ideal candidates have 2–5 years in cyber security, strong analytical skills, and familiarity with SIEM/EDR/NDR/XDR/UEBA, Windows, Linux, AD, and cloud security.

Qualifications

• 2–5 years in cyber security, preferably SOC/DFIR/CSIRT.
• Experience investigating security alerts, incidents, and threat activity.
• Strong analytical and problem-solving skills with incident focus.
• Excellent written and verbal communication to document findings.
• Knowledge of security monitoring technologies (SIEM/EDR/NDR/XDR/UEBA).
• Understanding MITRE ATT&CK and Cyber Kill Chain frameworks.
• Experience in incident response, threat hunting, and event analysis.
• Windows, Linux, and Active Directory familiarity; cloud security awareness.
• Certs like CISSP, CEH, OSCP, GIAC are a plus.

Responsibilities

• Monitor, investigate, and respond to security alerts and incidents enterprise-wide.
• Perform root cause analyses and determine containment actions.
• Conduct proactive threat hunting to identify emerging threats.
• Maintain and improve monitoring procedures and runbooks.
• Collaborate with detection engineering and automation teams to improve capabilities.
• Test attacker techniques to validate detection and response effectiveness.
• Support implementation and maintenance of security tools and platforms.
• Contribute to SOC projects and strengthen cyber defense capabilities.

Tools

SIEM

EDR

NDR

XDR

UEBA

Job description

JOB SUMMARY

SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 130 offices and 80,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group, Inc. (SMFG) is the holding company of SMBC Group, which is one of the three largest banking groups in Japan. SMFG's shares trade on the Tokyo, Nagoya, and New York (NYSE: SMFG) stock exchanges.

In the Americas, SMBC Group has a presence in the US, Canada, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization's extensive global network. The Group's operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., SMBC MANUBANK, JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd.

PRINCIPAL DUTIES AND RESPONSIBILITIES

• Monitor, investigate, and respond to security alerts, events, and incidents across the enterprise.
• Perform incident analysis to determine root cause, scope, impact, and containment actions.
• Conduct proactive threat hunting activities to identify emerging threats and suspicious activity.
• Maintain and improve monitoring procedures, response playbooks, and operational processes.
• Partner with detection engineering and automation teams to enhance security monitoring and response capabilities.
• Test and evaluate new attacker techniques, tactics, and procedures (TTPs) to validate detection and response effectiveness.
• Support the implementation, administration, and continuous improvement of security tools and platforms.
• Contribute to projects and initiatives that strengthen SOC operations, security controls, and overall cyber defense capabilities.

POSITION SPECIFICATIONS

• 2 to 5 years of experience in cyber security, preferably within a SOC, DFIR, or CSIRT environment.
• Experience investigating security alerts, incidents, and threat activity.
• Strong analytical, problem-solving, and incident investigation skills.
• Strong written and verbal communication skills, including the ability to document technical findings clearly.
• Security Operations
• Knowledge of security monitoring and response technologies, including SIEM, EDR, NDR, XDR, and UEBA platforms.
• Understanding of cyber security attack frameworks, including MITRE ATT&CK and Cyber Kill Chain.
• Experience with incident response, threat hunting, and security event analysis.
• Infrastructure and Platforms
• Strong knowledge of Windows and Linux operating systems.
• Experience with Active Directory environments.
• Understanding of cloud technologies and associated security considerations.
• Working Style
• Ability to work independently and manage multiple priorities effectively.
• Strong organizational skills and attention to detail in a service-focused environment.
• NICE TO HAVE
• Experience with digital forensics, purple teaming, detection engineering, security automation, or threat intelligence.
• Experience implementing or supporting enterprise security technologies.
• Industry certifications such as GCIH, GNFA, GFCA, CEH, OSCP, CISSP, or equivalent.
• Experience working within global or large-scale enterprise environments.

SMBC's employees participate in a Hybrid workforce model that provides employees with an opportunity to work from home, as well as, from an SMBC office. SMBC requires that employees live within a reasonable commuting distance of their office location. Prospective candidates will learn more about their specific hybrid work schedule during their interview process. Hybrid work may not be permitted for certain roles, including, for example, certain FINRA-registered roles for which in-office attendance for the entire workweek is required.

SMBC provides reasonable accommodations during candidacy for applicants wi