Senior Incident Response Analyst - Remote Cyber Defense

First Citizens Bank; Raleigh (NC); On-site; USD 140,000 - 188,000; Full time

Job summary

First Citizens Bank is seeking a Senior Incident Response Analyst to join the Cyber Incident Response team on a remote basis. The role requires hands-on expertise in detecting and responding to threats, coordinating with stakeholders, and mentoring colleagues.

Strong communication is essential to distill complex issues for fast incident management. The ideal candidate has extensive incident response experience, threat hunting capabilities, and familiarity with MITRE ATT&CK, cloud incidents

Qualifications

• Requires a Bachelor's Degree and 8+ years in information security.
• Alternate: High School Diploma with 12+ years in information security.
• Experience leading incident response and stakeholder management.
• 2+ years of threat hunting experience.
• Familiarity with MITRE ATT&CK and countermeasure mapping.
• Experience cloud incident response in Azure, AWS, and Google Cloud.

Responsibilities

• Investigate SIEM/SOAR events and respond to incidents.
• Lead incidents, coordinate investigation, mitigation, remediation.
• Ensure incidents are detected, documented, investigated, and resolved.
• Develop countermeasures and mitigations after incidents.
• Support threat hunting inputs and build mitigations for threats.
• Provide post-incident recommendations to improve processes.

Skills

Stakeholder management

Threat hunting

MITRE ATT&CK

Security events analysis

Threat mitigation mapping

Security requirements

Incident tracking

Cloud incident response

Cloud administration

Incident response leadership

Education

Bachelor's degree in Information Security

High school diploma or GED

Tools

Yara

Sigma

Regular expressions

Azure

AWS

Google Cloud

Job description

First Citizens Bank is seeking a Senior Incident Response Analyst to join the Cyber Incident Response team on a remote basis. The role requires hands-on expertise in detecting and responding to threats, coordinating with stakeholders, and mentoring colleagues.

Strong communication is essential to distill complex issues for fast incident management. The ideal candidate has extensive incident response experience, threat hunting capabilities, and familiarity with MITRE ATT&CK, cloud incidents