Senior Incident Response Lead – Remote & Threat Hunting

First Citizens Bank; Scottsdale (AZ); Remote; USD 140,000 - 188,000; Full time

Job summary

First Citizens Bank is seeking a Senior Incident Response Analyst to join the Cyber Incident Response team in a remote role, with priority given to candidates in North Carolina, Arizona, and Texas. The role supports threat hunting, intelligence, and monitoring functions and involves mentoring colleagues while distilling complex security issues for stakeholders.

The ideal candidate has extensive incident response experience, strong communication, and a track record of leading incidents from

Qualifications

• Bachelor's Degree and 8 years' experience required, or High School Diploma with 12 years' experience in Information Security.
• Experience with incident response including stakeholder management.
• 3+ years of Cyber Incident Response experience in which primary job was incident response.
• Experience translating threat actor techniques into mitigations across security technologies (Yara, Sigma, regex).
• Familiarity with MITRE ATT&CK and its application to countermeasure creation.

Responsibilities

• Investigate SIEM/SOAR events and apply malware analysis, network and endpoint security to contain incidents.
• Lead incidents, coordinating investigation, mitigation, and remediation with technical and business stakeholders.
• Ensure incidents are properly detected, documented, investigated, and resolved.
• Develop countermeasures and mitigations in response to incidents.
• Support threat hunting with operational inputs and build countermeasures to address threats.
• Provide recommendations from post-incident reviews to improve communication, processes, and mitigation options.

Skills

Incident handling

Incident leadership

Incident management

Content development

Threat hunting

Post-incident review

Education

Bachelor's degree

12+ years experience

Tools

Azure

AWS

Google Cloud

Yara

Sigma

Regex

Job description

First Citizens Bank is seeking a Senior Incident Response Analyst to join the Cyber Incident Response team in a remote role, with priority given to candidates in North Carolina, Arizona, and Texas. The role supports threat hunting, intelligence, and monitoring functions and involves mentoring colleagues while distilling complex security issues for stakeholders.

The ideal candidate has extensive incident response experience, strong communication, and a track record of leading incidents from