Senior Incident Response Lead | Remote & Threat Hunting

First Citizens Bank; Arizona; On-site; USD 140,000 - 188,000; Full time

Benefits offered by this job

Benefits package

Job summary

First Citizens Bank is seeking a Senior Incident Response Analyst for a remote role that can be hired in multiple U.S. markets. You will join the Cyber Incident Response team, detecting and responding to threats, interacting with business stakeholders, and restoring operations.

The role supports Threat Hunting, Intelligence, and Monitoring with content creation, threat analysis, detection recommendations, and mentoring colleagues. Strong communication to distill complex issues is essential.

Qualifications

• Experience across all aspects of Incident Response including stakeholder management.
• 2+ years Threat Hunting experience.
• Familiarity with MITRE ATT&CK and its application to countermeasure creation is a plus.
• Experience analyzing/dispositioning and escalating security events across systems, applications, networks, and authentication/email.
• Ability to translate threat actor techniques into mitigations across security technologies (Yara/Sigma/Regex).
• Ability to define security requirements and drive project deliverables.

Responsibilities

• Investigate SIEM/SOAR events; apply malware analysis and network/endpoint security to contain incidents.
• Lead incidents, coordinating investigation, mitigation, and remediation with stakeholders.
• Ensure incidents are properly detected, documented, investigated, and resolved.
• Support content development for countermeasures and mitigations.
• Assist threat hunting with operational inputs and track evolving threat techniques.
• Provide post-incident reviews with recommendations to improve processes and on-call readiness.

Skills

Incident response

Threat hunting

SOC operations

Stakeholder communication

Cloud incident response

Malware analysis

Education

Bachelor's Degree in Information Security or related field

High School Diploma or GED with 12 years information security experience

Tools

SIEM

SOAR

Azure

AWS

Google Cloud

Yara

Sigma

Job description

First Citizens Bank is seeking a Senior Incident Response Analyst for a remote role that can be hired in multiple U.S. markets. You will join the Cyber Incident Response team, detecting and responding to threats, interacting with business stakeholders, and restoring operations.

The role supports Threat Hunting, Intelligence, and Monitoring with content creation, threat analysis, detection recommendations, and mentoring colleagues. Strong communication to distill complex issues is essential.