Senior Incident Response Lead - Remote Threat Hunting

First Citizens Bank; Raleigh (NC); Remote; USD 140,000 - 188,000; Full time

Job summary

First Citizens Bank is seeking a Senior Incident Response Analyst for a remote role. You will join the Cyber Incident Response team and lead investigations, coordinate with stakeholders, and develop mitigations across SIEM/SOAR environments.

Strong communication is essential to distill complex threats for rapid response. Ideal candidates have 3+ years in incident response, plus experience with cloud platforms (Azure/AWS/Google Cloud) and threat hunting activities.

Qualifications

• Bachelor's degree with 8+ years information security experience.
• Alternative: HS diploma/GED with 12+ years in information security.
• 3+ years in Cyber Incident Response.

Responsibilities

• Investigate SIEM/SOAR events; malware/network/endpoint security impact.
• Lead incidents; coordinate investigation, mitigation, remediation with stakeholders.
• Ensure incidents are detected, documented, investigated, resolved.
• Develop content for countermeasures and mitigations.
• Support threat hunting and build countermeasures against threats.
• Provide recommendations after incidents to improve processes.

Skills

Incident response

Threat hunting

Malware analysis

Stakeholder management

Cloud security

Threat intelligence

Threat detection

Communication

Education

Bachelor's degree in information security or related field

High School diploma or GED + 12 years experience

Tools

Azure

AWS

Google Cloud

SIEM/SOAR

Job description

First Citizens Bank is seeking a Senior Incident Response Analyst for a remote role. You will join the Cyber Incident Response team and lead investigations, coordinate with stakeholders, and develop mitigations across SIEM/SOAR environments.

Strong communication is essential to distill complex threats for rapid response. Ideal candidates have 3+ years in incident response, plus experience with cloud platforms (Azure/AWS/Google Cloud) and threat hunting activities.