Cyber Security Analyst

We need to output HTML fragment with sections: headings

for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections where there is real specific content. We must not repeat job title as heading. Remove boilerplate, navigation, legal, EEO, etc. Preserve all substantive info. Let's parse the posting. First paragraph: "Thank you for your interest in a career at Regions..." That's intro fluff, maybe not needed? It's about company culture. Could be considered "About the role"? Actually it's generic. Might be considered boilerplate? The instruction: Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. The intro about believing associates deserve more than just a job is maybe not essential but could be considered "About the role"? However it's not specific to the role. Probably we should omit it as it's generic fluff. The substantive content starts after "Job Description". So we can start with a heading maybe "About the role"? But we need to decide. The posting includes: - Job Description: At Regions, the Cyber Security Analyst is responsible for analyzing, identifying, and documenting cybersecurity information and risks. This role requires proactiveness and an understanding of or willingness to learn core technology and cybersecurity principles along with industry best practices to investigate, remediate and/or escalate for further evaluation. That's a prose description. Could go under

About the role

with a

. Then "Primary Responsibilities" list bullet points. Use

• . Then "This position is exempt from timekeeping requirements under the Fair Labor Standards Act and is not eligible for overtime pay." That's maybe part of Schedule? Actually it's about overtime eligibility. Could be under Schedule? But we only create Schedule section if posting actually states schedule details. It mentions schedule: "Associates will have regular work hours, including full days in the office three or more days a week. The manager will set the work schedule for this position, including in-office expectations." That's schedule info. Also "This position is intended to be onsite, now or in the near future." So we have schedule/location info. Could create a

  Schedule

  with that info. Then "Requirements" list: High School Diploma or GED and six (6) years of related post-secondary education and/or experience in Information Security or Information Technology; Minimum of two (2) relevant certifications...; Willingness and availability to work on a pre-determined shift and rotational on call That's requirements. Use

  Requirements

  with
  . Then "Preferences" list: One (1) Intermediate to Advanced Amazon Web Services (AWS) or Azure Architect/Administrator and/or Security specialty certification; Experience in a Security Operations Center (SOC) environment; Experience performing security analysis using Security and Incident Event Management (SIEM) systems; Understanding of MITRE ATT&CK Framework and Cyberattack Kill Chain and how these frameworks can be used to identify gaps as well as orient analysts in attack progression. These are "Preferred" maybe could go under Skills? But we have a separate "Skills And Competencies" section later. The preferences could be considered part of Skills or Qualifications. The instruction: Use headings for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we can map: - About the role: job description paragraph. - Responsibilities: Primary Responsibilities list. - Requirements: the mandatory requirements. - Qualifications: maybe the preferences? Or we could treat Preferences as Qualifications. But we also have Skills And Competencies section. - Skills And Competencies: list of abilities. - Preferred Skills: another list. We could combine Skills And Competencies and Preferred Skills into a Skills section, but we need to avoid thin sections. Could have one Skills section that includes both. But we need to follow instruction: Prefer a few substantive sections over many thin ones. So maybe combine Skills And Competencies and Preferred Skills into a single Skills section. Benefits: there is a Benefits Information section with list. Pay: there is Compensation Details with pay ranges and note about incentive pay. That's specific numbers, so we should include Pay section. Schedule: we have schedule info. Location: there is Location Details but we are told not to put Job ID etc. Location could be part of Schedule? Not exactly. There's no heading for Location in allowed list, but we could include location details under Schedule or maybe under About the role? The instruction only lists those headings; we should not create other headings. So we need to fit location info somewhere else, maybe under Schedule (since schedule includes location expectations) or under About the role. But location is separate: "Locations available for this role are Birmingham, AL, Atlanta, GA, Nashville, TN, or Charlotte, NC." Also "Associates will have regular work hours, including full days in the office three or more days a week." So we could put location info under Schedule as well, or maybe under About the role. I'd put location info under Schedule heading, as it's about work location and schedule. We must not include boilerplate like Equal Opportunity Employer, etc. We must not include application instructions. Now let's extract substantive content: About the role paragraph: "At Regions, the Cyber Security Analyst is responsible for analyzing, identifying, and documenting cybersecurity information and risks. This role requires proactiveness and an understanding of or willingness to learn core technology and cybersecurity principles along with industry best practices to investigate, remediate and/or escalate for further evaluation." Responsibilities list (Primary Responsibilities): - Analyze and respond to cyber threats within various security tools according to documented procedures. - Collaborates with various stakeholders within Cyber Security/Technology departments and standard owners to properly document and communicate security risks - Proactively supports a feedback loop related to information and events in order to identify and support the remediation of improving precision and accuracy of analysis. - Review and understand Policies, Standards, and Procedures for improved process flows. - Supports threat hunting, participate in tabletop exercises, and assist in Incident Response on a rotational job-duty basis as needed - Maintains meticulous records of all work performed, including root cause analysis, indicators of compromise, remediation steps, timeline of events, and impact assessment using clear and concise annotations as needed - Stays abreast of global cybersecurity threat trends - Supports and collaborates with various cybersecurity teams to document security posture and assess environment for relevant IOCs and gaps - Participates in and ensures proper documentation of various security assessments (i.e. Security Architecture Reviews, Red Team assessments, Purple Team engagements, and formal tabletop exercises) as needed - Assists with analyzing software for violations in Regions Cyber Security standards as needed - Serves as an escalation point, mentor, and trainer for junior analysts - May participate in specials projects - Ensures compliance with risk management programs, rules and regulations, and cybersecurity practices; identifies opportunities for and supports process improvements; applies disciplined change management practices Note some bullet points have inconsistent verb forms; we keep as is. Requirements: - High School Diploma or GED and six (6) years of related post-secondary education and/or experience in Information Security or Information Technology - Minimum of two (2) relevant certifications in Information Security or the ability to obtain relevant certifications within twelve months of start date in this position, such as CompTIA Network+/Security+/CySA+, EC-Council Certified Ethical Hacker (CEH), Cisco CCNA/CCNA-Security, GIAC GSEC, CDSA, etc. - Willingness and availability to work on a pre-determined shift and rotational on call Preferences (could be Qualifications): - One (1) Intermediate to Advanced Amazon Web Services (AWS) or Azure Architect/Administrator and/or Security specialty certification - Experience in a Security Operations Center (SOC) environment - Experience performing security analysis using Security and Incident Event Management (SIEM) systems - Understanding of MITRE ATT&CK Framework and Cyberattack Kill Chain and how these frameworks can be used to identify gaps as well as orient analysts in attack progression. Skills And Competencies: - Ability to be a self-starter with initiative and drive for continuous improvement - Ability to be a team-oriented individual who works well with others and places a premium on the group’s success - Ability to interpret and ensure compliance with applicable rules, regulations, and industry guidance - Demonstrated strong organizational, research, analytical and problem-solving skills to evaluate situations and respond appropriately - Excellent writing and verbal communication skills - Familiarity with concepts related to security disciplines such as: malware analysis, computer forensics, cyber incident response, network intrusion detection, network traffic and packet analysis, penetration testing, vulnerability scanning, compliance, audit, or cyber threat intelligence - Strong understanding of information security principles, controls, and technologies - Strong investigative and problem-solving skills Preferred Skills: - Strong learner with a curiosity and willingness to grow technical and professional skills - Self‑motivated and proactive (“driver” mindset) - Clear and effective communicator, both written and verbal - Process‑oriented with attention to detail and consistency - Experience supporting GRC activities and documentation efforts - Prior experience working within Jira and other tracking tools to manage tasks and workflows - Experience reviewing and analyzing compliance and audit documentation Benefits Information list: - Paid Vacation/Sick Time - 401K with Company Match - Medical, Dental and Vision Benefits - Disability Benefits - Health Savings Account - Flexible Spending Account - Life Insurance - Parental Leave - Employee Assistance Program - Associate Volunteer Program Pay: - Minimum Job Range Target: $70,302.65 USD - Median $100,710.00 USD - Incentive Pay Plans: This job is not incentive eligible. Also note: "Compensation Details Pay ranges are job specific and are provided as a point-of-market reference for compensation decisions. Other factors which directly impact pay for individual associates include: experience, skills, knowledge, contribution, job location and, most importantly, performance in the job role. As these factors vary by individuals, pay will also vary among individual associates within the same job. The target information listed below is based on the Metropolitan Statistical Area Market Range for where the position is located and level of the position." We could include that prose as part of Pay section. Schedule: - This position is intended to be onsite, now or in the near future. - Associates will have regular work hours, including full days in the office three or more days a week. - The manager will set the work schedule for this position, including in-office expectations. - Locations available for this role are Birmingham, AL, Atlanta, GA, Nashville, TN, or Charlotte, NC. - Relocation: Regions will not provide relocation assistance for this position, and relocation would be at your expense. - Work visa: Regions will not sponsor applicants for work visas for this position at this time. - Applicants must currently be authorized to work in the United States on a full-time basis. - Position Type: Full time Also note: "This position is exempt from timekeeping requirements under the Fair Labor Standards Act and is not eligible for overtime pay." That could be part of Schedule. We should not include boilerplate like "Equal Opportunity Employer/including Disabled/Veterans", etc. Now we need to output HTML fragment with headings

  and appropriate

  or

  • . We should not include any extra text outside HTML. We need to decide which sections to include: About the role, Responsibilities, Requirements, Qualifications (maybe Preferences), Skills, Benefits, Pay, Schedule. We could combine Preferences into Qualifications. Or we could have Qualifications section for the preferences (since they are qualifications). But we already have Requirements. Qualifications could be the preferences. Let's do that. Skills: combine Skills And Competencies and Preferred Skills into one Skills section. Now let's craft HTML. We'll start with

    About the role

    ...

    Then

    Responsibilities