Sr Cyber Defense Ops Spec

About the role

A senior individual contributor in the Cyber Defense Threat Detection (CDTD) Cyber Defense Operations Center (CDOC), responsible for security monitoring, intrusion analysis, incident handling, data loss prevention, privileged user monitoring, training of analysts, security incident management, malware detection/eradication, and recognizing hacker/incident response tactics, techniques, and procedures.

You will have responsibility for one or more security systems aligned with their specific function, either directly or indirectly, and will be a technical authority for critical operational decisions with authority extending beyond the team to include both technology and business line areas in security-related decisions. This role requires staying current with security technology, the threat landscape, and emerging threats, and acting as a subject matter expert in specific disciplines.

Responsibilities

• Perform ongoing monitoring and threat analysis, analyzing logs, NetFlow data, and packet capture.
• Identify potential IT security incidents and escalate information to appropriate IR senior staff.
• Assess threat and vulnerability information from all sources (both internal and external) and promptly apply applicable mitigation techniques.
• Develop meaningful metrics to reflect the true posture of the environment, allowing the organization to make educated decisions based on risk.
• Use information from cyber security tools and processes to assess potential security and business impacts while communicating recommendations to management.
• Represent Cyber Defense as needed on security-related or risk-related initiatives or working groups where technical skills and security expertise are required.
• Proactively protect, monitor, investigate, and resolve threats to secure the user environment and company assets.

Requirements

• 3 or more years of security industry experience, preferably in a Security Operations Center (SOC) environment.
• Experience with the following tools is highly desirable:
  • Security Information and Event Management Tools (Arcsight, Splunk, etc.)
  • Intrusion Prevention/Detection Tools (FirePower, McAfee)
  • Database Security Tools (Guardium, jSonar)
  • Data Loss Prevention Tools (Symantec, Triton, etc.)
  • Firewalls (Cisco, Palo Alto, Check Point, etc.)
  • Application Security Tools (Web Application Firewalls)
  • Vulnerability tools
  • Cyber Security Incident Response
  • Host Intrusion Detection Systems
  • XDR and Antivirus Tools (Crowdstrike, Symantec, MS Defender)
• Strong verbal and written communication skills, including the ability to communicate technical concepts to non-technical audiences.
• Excellent critical thinking, problem-solving, and decision-making skills.
• Active listening, attention to detail, customer service, prioritization, and problem-solving skills.
• Ability to work independently or strategically and adapt to a dynamic environment.

Qualifications

• Bachelor’s Degree or equivalent combination of experience.
• A combination of relevant industry certifications preferred (e.g., Net+, Sec+, CySA+, CEH, Pentest+, GCFA, GSOC, AWS Certified Cloud Practitioner, Microsoft Azure Fundamentals).

Schedule

• Hours per Week: 40 (4 days per week).
• Work Schedule: 7:00 AM – 5:00 PM (Tuesday - Friday).
• Location: One Citizens Way, Johnston, RI - Citizens Bank Johnston Campus (this is not a remote opportunity).

Pay

The salary range for this position is $84,000 - $100,000 per year, plus an opportunity to earn additional incentive earnings (if applicable). Actual pay is based on various factors including, but not limited to, the budget, work location, and relevant skills and experience.

Benefits

• Competitive pay.
• Comprehensive medical, dental, and vision coverage.
• Retirement benefits.
• Maternity/paternity leave.
• Flexible work arrangements.
• Education reimbursement.
• Wellness programs.
• Paid time off policy that exceeds mandatory paid sick or paid time-away requirements in every U.S. local and state jurisdiction.

For an overview of our benefits, visit Citizens Benefits.