Cybersecurity Operations Defense Analyst II

M&t Bank; Honolulu (HI); On-site; USD 3,318,638 - 5,529,686; Full time

Job summary

M&T Bank is seeking a cybersecurity professional to identify threats, analyze logs, and coordinate incident responses to protect information systems. Responsibilities include monitoring network activity, analyzing logs, and maintaining incident trackers across the enterprise.

The role requires experience in multiple cybersecurity domains, SDLC knowledge, and quick learning of new skills. Location is Clanton, AL with hourly pay range noted.

Qualifications

• Minimum 3 years’ higher education and/or work experience in two or more cybersecurity domains.
• Understanding of System Development Life Cycle (SDLC).
• Ability to learn new technical skills quickly.

Responsibilities

• Characterize and analyze network traffic to identify anomalous activity and threats.
• Capture and analyze logs from security monitoring tools.
• Collect intrusion artifacts to enable mitigation of incidents.
• Complete static malware, threat and log analysis with past data.
• Conduct research and correlation across data sources for indications and warnings.
• Analyze incident data to identify trends and impact.
• Maintain incident tracking and solution databases.
• Notify managers and stakeholders of suspected incidents and status.
• Analyze logs/evidence to identify perpetrators of intrusions.
• Provide timely notice of hostile activities impacting objectives.
• Provide daily summary reports of network events during shifts.
• Follow cybersecurity SOPs and suggest improvements.
• Adhere to risk/regulatory standards and escalate issues.

Education

3+ years education/experience in cybersecurity domains

Associates degree preferred

Job description

Overview

Uses defensive measures and information collected from various sources to identify, analyze and report events occurring within the network to protect information, information systems and networks from threats. Recognizes corollary or potentially-related events to identify trends and impacts to the organization’s security posture.

Primary Responsibilities

• Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources.
• Capture and analyze system and event logs associated with malicious activities using security monitoring tools.
• Collect intrusion artifacts and use discovered data to enable mitigation of potential cyber defense incidents within the enterprise.
• Complete static malware, threat and log analysis in coordination with past incident analysis data.
• Conduct research, analysis and correlation across all source data sets including indications and warnings.
• Analyze incident data for security events and identify emerging trends.
• Maintain incident tracking and solution database.
• Notify designated managers, cyber incident responders and appropriate stakeholders of suspected cyber incidents and articulate the event’s history, status and potential impact for further action in accordance with the organization’s cyber incident response plan.
• Conduct analysis of log files, evidence and other information to determine best methods for identifying the perpetrator(s) of a network intrusion or other crimes.
• Provide timely notice of imminent or hostile intentions or activities impacting organization objectives, resources or capabilities.
• Provide daily summary reports of network events and activity relevant to cyber defense practices as part of shift turnover activities.
• Follow Cybersecurity Standard Operating Procedures (SOPs) and provide recommendations for SOP efficiency improvements.
• Understand and adhere to the Company’s risk and regulatory standards, policies and controls in accordance with the Company’s Risk Appetite. Identify risk‑related issues needing escalation to management.
• Promote an environment that supports diversity and reflects the M&T Bank brand.
• Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
• Complete other related duties as assigned.

Scope of Responsibilities

Supervisory/Managerial Responsibilities: None

Education and Experience Required

Minimum of 3 years’ higher education and/or work experience, including a minimum of 1 year relevant work experience in two (2) or more of these Cybersecurity domains: Security and Risk Management, Asset Security, Security Engineering, Communication and Network Security, Identity and Access Management, Security Testing and Security Operations. Understanding of System Development Life Cycle (SDLC). Knowledge of application development support software and hardware platforms. Knowledge of mainframe and/or distributed computing environments. Experience completing detailed problem analysis and resolution. Capable of quickly learning new technical skills. Experience participating in technical analysis walkthroughs.

Education and Experience Preferred

Associates degree in an applicable discipline. Minimum of 2 years’ relevant work experience in two (2) or more of these Cybersecurity domains: Security and Risk Management, Asset Security, Security Engineering, Communication and Network Security, Identity and Access Management, Security Testing and Security Operations. Knowledge of the Bank’s application development support software and hardware platforms. Technical understanding of mainframe and/or distributed computing environments. Experience with active participation in technical analysis walkthroughs. Security+ certification or applicable Cybersecurity domain-related industry‑recognized certification.

Physical Requirements

M&T Bank is committed to fair, competitive, and market‑informed pay for our employees. The pay range for this position is $24.09 - $40.14 Hourly (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation.

Location

Clanton, Alabama, United States of America