Remote Senior Incident Response Analyst | Threat Intel

First Citizens Bank; Scottsdale (AZ); Remote; USD 140,000 - 188,000; Full time

Job summary

First Citizens Bank is seeking a Senior Incident Response Analyst to join the Cyber Incident Response team in a remote role across the United States. You will detect and respond to threats, coordinate with business stakeholders, and mentor colleagues while developing countermeasures and threat content.

The role emphasizes incident leadership, content development, threat hunting, and leveraging MITRE ATT&CK concepts to improve security operations.

Qualifications

• Bachelor's Degree with 8+ years in Information Security.
• High School Diploma with 12+ years in Information Security.
• Experience in incident response and stakeholder management.
• Familiarity with MITRE ATT&CK and threat hunting.

Responsibilities

• Investigate SIEM/SOAR events and respond to incidents.
• Lead incidents, coordinating investigation, mitigation, and remediation.
• Ensure incidents are detected, documented, investigated, and resolved.
• Develop countermeasures and mitigations after incidents.
• Support threat hunting and build countermeasures against evolving threats.
• Provide post-incident recommendations to improve processes.

Skills

Incident analysis

Threat hunting

Stakeholder management

Incident response

Malware analysis

Cloud incident response

Education

Bachelor's Degree in Information Security or related field

High School Diploma or GED with 12+ years in Information Security

Tools

Yara

Sigma

Regular Expressions

Azure

AWS

Google Cloud

Job description

First Citizens Bank is seeking a Senior Incident Response Analyst to join the Cyber Incident Response team in a remote role across the United States. You will detect and respond to threats, coordinate with business stakeholders, and mentor colleagues while developing countermeasures and threat content.

The role emphasizes incident leadership, content development, threat hunting, and leveraging MITRE ATT&CK concepts to improve security operations.