Senior Remote Incident Response Analyst & Threat Hunter

First Citizens Bank; North Carolina; On-site; USD 140,000 - 188,000; Full time

Job summary

First Citizens Bank is seeking a Senior Incident Response Analyst for a remote role that can be hired across multiple markets in the United States. You will join the Cyber Incident Response team to detect, respond, and lead incident management while mentoring colleagues and developing content for mitigations.

You'll support Threat Hunting, Intelligence, and Monitoring functions, translating threat actor techniques into practical defenses.

Qualifications

• Experience across all aspects of incident response including stakeholder management.
• 2+ years of threat hunting experience.
• Familiarity with MITRE ATT&CK and applying it to mitigations.
• Experience analyzing, dispositioning, and escalating security events.
• Translating threat actor techniques to mitigations using Yara, Sigma, or regex.
• Ability to define security requirements and drive project deliverables.
• Ability to track multiple incidents and ensure timely responses.
• Experience responding to cloud incidents in Azure, AWS, and Google Cloud.
• Cloud administration experience is preferred.
• Cyber Incident Response experience – 3+ years in an IR role.
• On-call rotation after hours, weekly.

Responsibilities

• Investigate SIEM/SOAR events; apply malware analysis and network/endpoint security know-how.
• Lead incidents: coordinate investigation, mitigation, and remediation with stakeholders.
• Ensure incidents are detected, documented, investigated, and resolved.
• Develop countermeasures and mitigations after incidents.
• Support threat hunting and build countermeasures against evolving threats.
• Provide post-incident recommendations to improve processes and communication.

Skills

Incident response

Threat hunting

Stakeholder management

Cloud incidents

MITRE ATT&CK

Yara/Sigma/Regex

Incident management

SIEM/SOAR

Education

Bachelor's degree in information security

High school diploma or GED

Tools

SIEM

SOAR

Yara

Sigma

Regex

Azure

AWS

GCP

Job description

First Citizens Bank is seeking a Senior Incident Response Analyst for a remote role that can be hired across multiple markets in the United States. You will join the Cyber Incident Response team to detect, respond, and lead incident management while mentoring colleagues and developing content for mitigations.

You'll support Threat Hunting, Intelligence, and Monitoring functions, translating threat actor techniques into practical defenses.