Information Security Analyst II

Jobs via Dice; Raleigh (NC); Remote; USD 110,000 - 140,000; Part time

Job summary

A leading client of a tech career destination is seeking an experienced Security Event Telemetry Triage Analyst for a remote position with weekend and flexible weekday hours. The role focuses on threat monitoring, content creation, and providing analytical support in Information Security operations. Candidates must possess a solid background in malware analysis, security incident response, and possess the ability to create effective automation solutions to improve processes.

Qualifications

• 4 years of experience in Information Security required.
• Familiarity with event triage and analysis methods.
• Understanding of malware attack paths and associated artifacts.

Responsibilities

• Investigate SIEM/SOAR events to respond to and contain incidents.
• Support the creation of countermeasures in response to incidents.
• Identify areas for automation in response processes.

Skills

Malware Analysis

Network Security

Incident Response

Threat Monitoring

Cyber Security Operations

Security Orchestration Automation & Response

Phishing Mitigation

Education

Bachelor's Degree in Information Security

High School Diploma or GED

Tools

Splunk

SIEM

SOAR

Job description

1 day ago Be among the first 25 applicants

Get AI-powered advice on this job and more exclusive features.

Dice is the leading career destination for tech experts at every stage of their careers. Our client, First-Citizens Bank & Trust Company, is seeking the following. Apply via Dice today!

Overview

This is a remote role that may be hired in several markets across the United States.

Three 12 hour shifts over the weekend and one 4 hour shift during the week. The weekday shift to be discussed with candidate to find a suitable time for their schedule and our needs.

Seeking an experienced security event telemetry triage Analyst. This is a technical role supporting the Threat Monitoring function with content creation and threat analysis. Candidates who have worked in a Security Operations Center in the past with experience in understanding network, host, and application security telemetry are preferred.

Daily Cadence

• Support the technical analysis of SIEM alerts as requested by the triage team.
• Support the content creation pipeline for new threats identified as a result of an incident, threat intelligence, or vulnerability.
• Identify any technology gaps and contribute to designing solutions to address them.
• Support the automation effort to streamline and accelerate triage response.
  
  

Responsibilities

• Event Triage and Analysis -investigate SIEM/SOAR events as necessary; bring experience in malware analysis, network/endpoint security to respond and contain incidents.
• Content Development - Support the creation countermeasures and mitigations in response to an incident or threat actor technique.
• Threat Hunting - Support the operational driven inputs (eg. on the heels of an incident or event) into threat hunting and help build countermeasures/mitigations to detect commodity and targeted threats.
• Automation - Identify areas for automation and facilitate the creation of automation use cases and support their implementation.
  
  

Qualifications

Bachelor's Degree and 4 years of experience in Information security OR High School Diploma or GED and 8 years of experience in Information security

Preferred Qualifications:

• Familiarity with event triage and analysis methods, building containment and mitigation strategies, and executing them at speed is a must.
• Understanding malware attack paths, its associated artefacts on disk and memory and its use of legitimate applications to hide behaviors will be useful.
• Familiarity with malware behaviors or hands on malware analysis would be a plus.
• Familiarity with exploit writing and as a consequence understanding application behaviors would be useful.
  
  

Preferred Skills: Splunk Splunk Enterprise Security Security Information Event Management (SIEM) Incident Response Malware Analysis Forensics Threat Monitoring Cyber Security Operations Cyber Threat Response Cyber Threat Hunting Cyber Investigation Alarm triage Security Orchestration Automation & Response (SOAR) Phishing analysis Phishing mitigation MITRE ATT&CK Matrix Kill Chain

The base pay for this position is generally between $110,000 and $140,000. Actual starting base pay will be determined based on skills, experience, location, and other non-discriminatory factors permitted by law. For some roles, total compensation may also include variable incentives, bonuses, benefits, and/or other awards as outlined in the offer of employment.

This job posting is expected to remain active for 30 days from the initial posting date listed above. If it is necessary to extend this deadline, the posting will remain active as appropriate. Job postings may come down early due to business need or a high volume of applicants.

Benefits are an integral part of total rewards and First Citizens Bank is committed to providing a competitive, thoughtfully designed and quality benefits program to meet the needs of our associates. More information can be found at

$descr2

$descr3

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Part-time

Job function

• Job function

  Information Technology

• Industries

  Software Development

Referrals increase your chances of interviewing at Jobs via Dice by 2x

Get notified about new Information Security Analyst jobs in Raleigh, NC.

Manager, Information Security Innovation Engineer (Automation and Innovation)

Raleigh, NC $55,000.00-$85,000.00 3 hours ago

Raleigh, NC $110,000.00-$140,000.00 2 days ago

Information Security Analyst III (Remote)

Information Security Analyst III (Remote)

Senior Information Security Analyst (Remote)

Raleigh, NC $127,000.00-$155,000.00 21 hours ago

Disability Analyst Trainee, Disability Analyst 1.0, 1.5, 2.0, 2.5

Cary, NC $125,000.00-$145,000.00 5 days ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.