Security Analyst - SOC - Tuesday - Saturday - 3:00pm EST - 11:30pm EST

PNC; Pennsylvania; On-site; USD 75,000 - 138,000; Full time

Job summary

PNC is seeking a Security Analyst to join its Technology organization. Based in Pittsburgh, Denver, Phoenix, Cleveland, or Birmingham, you will work on 3:00pm–11:30pm EST shifts and support security operations.

You will evaluate alerts from SIEM/EDR, tune events, extract IOCs, and implement mitigations. The role emphasizes collaboration, governance, and protecting the institution's security posture.

Qualifications

• Security monitoring and incident response experience required.
• Familiarity with SIEM and EDR technologies and related tooling.
• Ability to tune security rules and reduce false positives.
• Experience correlating events and coordinating remediation actions.

Responsibilities

• Evaluate, respond, and mitigate alerts from SIEM/EDR and security products.
• Tune SIEM rules to reduce false positives and identify IOCs.
• Analyze threats, scope events, and implement remediation steps.
• Provide operational support as a security SME and coordinate with teams.

Skills

SIEM

EDR

Security Operations

Analytical Thinking

Incident Response

Education

Bachelor's degree

Tools

NGFWs

IDS/IPS

Anti-virus

Web Application Firewalls

NAC Solution

Sandboxing / IOCs

Job description

Position Overview

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company's success. As a Security Analyst within PNC's Technology organization, you will be based in Pittsburgh, PA; Denver, CO; Phoenix, AZ; Cleveland, OH; or Birmingham, AL.

The work shift will be: Tuesday - Saturday - 3:00pm EST- 11:30pm EST

Ideal Candidate

• Evaluate, respond, and mitigate alerts that originate from the SIEM and the Cyber security product suite, e.g. NGFWs, IDS/IPS, Anti-virus, Web Application Firewalls, NAC Solution, EDR, etc.
• Demonstrate use and understanding of security technologies such as Security Incident and Event Management (SIEM) & Endpoint Detection and Response (EDR)
• Assist with tuning the SIEM events to reduce the false positives
• Extract the IOCs and behavioral characteristics of malicious samples and implement the proper mitigation (Sandboxing)
• Demonstrate the ability to scope an event to ensure the proper remediation steps
• Ability to demonstrate subject matter expertise on the one or more functions performed by the SOC
• Perform operational support for the institution as a representative of the security organization

PNC is an in-office company that fosters a supportive culture where employees can thrive and achieve balance. We encourage candidates to connect with their recruiter and hiring manager to understand workplace expectations and ensure the role aligns with their goals.

PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position.

Job Description

Provides technical evaluation and analysis. Supports activities, process, and tools needed to improve overall security posture of the organization.

Applies security concepts, reviews information, executes defined tasks, analyzes requirements, reviews logs, and creates documentation. Performs investigation and data loss prevention, data manipulation, and coordination of activities. Performs actions to address or mitigate risks and vulnerabilities. Reviews and defines controls.

Advises on more complex security procedures and products for clients, security administrators and network operations. Participates in enforcement of control security risks and threats; potential of one more controls subject to manager discretion. Shares knowledge with staff.

Conducts security assessments and other information security routines consistently. Investigates and recommends corrective actions for data security related to established guidelines.

Qualifications

Successful candidates must demonstrate appropriate knowledge, skills, and abilities for a role. Listed below are skills, competencies, work experience, education, and required certifications/licensures needed to be successful in this position.

Preferred Skills

• Cyber Threat Intelligence
• Data Security
• Fraud Prevention
• Information Security
• Intrusion Detection
• Network Security
• Security Audit
• Security Evaluations
• Security Operations
• Vulnerability Assessments

Competencies

• Analytical Thinking
• Effective Communications
• Information Assurance
• Information Security Management
• Information Security Technologies
• IT Environment
• IT Standards
• Procedures & Policies
• IT Systems Management
• Problem Solving
• Software Security Assurance

Work Experience

Roles at this level typically require a university / college degree, with 3+ years of relevant / direct industry experience. Certifications are often desired. In lieu of a degree, a comparable combination of education, job specific certification(s), and experience (including military service) may be considered.

Education

Bachelors

Certifications

No Required Certification(s)

Licenses

No Required License(s)

Language Assessments

No Required or Preferred Language Assessments

Pay Transparency

Base Salary: $75,000.00 - $137,500.00

Salaries may vary based on geographic location, market data and on individual skills, experience, and education. This role is incentive eligible with the payment based upon company, business and/or individual performance.

Application Window

Generally, this opening is expected to be posted for two business days from