Senior Cyber Security Analyst - Threat Management (remote)

First Citizens Bank is seeking a Senior Cyber Security Analyst specializing in Threat Management. This remote position involves leading the analysis and mitigation of threats to the bank's networks and systems, ensuring timely reporting and developing technical solutions to enhance information security.

Responsibilities:

• Perform in-depth analysis of security events and detections from SIEM and EDR platforms
• Review and recommend improvements to security policies and detection strategies across security tools
• Assist with log analysis for critical applications, ensuring proper field capture and normalization
• Collaborate with IT teams and application owners to identify gaps and implement detection enhancements
• Apply MITRE ATT&CK framework to strengthen detection coverage and threat modeling
• Document findings, recommendations, and detection logic clearly and concisely
• Develop and execute threat hunting hypotheses based on emerging threats, attacker behavior (TTPs), and intelligence
• Identify indicators of compromise (IOCs) and indicators of attack (IOAs) across endpoints, networks, and cloud environments
• Analyze logs, alerts, and telemetry from SIEM, EDR/XDR, NDR, and other security tools
• Investigate anomalies and suspicious patterns to uncover previously undetected threats
• Perform root cause analysis and determine scope, impact, and attacker activity

Requirements:

• Bachelor's Degree and 8 years of experience in Information security OR High School Diploma or GED and 12 years of experience in Information security
• Proven experience in detection engineering within cybersecurity operations
• Strong proficiency in Splunk (Power User level or higher); Splunk administration experience preferred
• Hands-on experience with security tools such as CrowdStrike, UEBA, and database monitoring solutions
• Familiarity with SIEM and EDR analysis methodologies
• Working knowledge of the MITRE ATT&CK framework
• Excellent communication and organizational skills; ability to guide application owners through technical requirements
• Splunk administration experience