Senior Cyber Security Analyst – Incident Response

First Citizens Bank

. Investigate SIEM/SOAR events and respond to and contain incidents using malware analysis, network security, and endpoint security expertise .

Posted 11/2/2026full-timeRemote • United StatesSenior💰 $140,000 - $188,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Incident Response, Threat Hunting, and Security Analysis, with a strong focus on mitigating cyber threats and improving security processes. Proficient in utilizing tools and methodologies such as YARA, Sigma, and MITRE ATT&CK to enhance incident management and response strategies.

Highest-signal resume keywords

Incident ResponseThreat HuntingCybersecurity AnalysisCloud Security (Azure, AWS, Google Cloud)MITRE ATT&CK Familiarity

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Malware AnalysisNetwork SecurityEndpoint SecurityThreat AnalysisYARASigmaRegular ExpressionsIncident DocumentationMitigation StrategiesSecurity Event Analysis

Soft Skills

Strong Communication SkillsStakeholder LiaisonMentoring

Tools & Technologies

SIEMSOARCloud PlatformsThreat Intelligence Tools

Industry Keywords

Information SecurityCyber Incident ResponseThreat Actor TechniquesOperational SecurityPost-Incident Recommendations

Tech Stack

Tools & technologies

AWSAzureCloud

About the role

Key responsibilities & impact

Investigate SIEM/SOAR events and respond to and contain incidents using malware analysis, network security, and endpoint security expertise
Lead incidents and coordinate technical investigation, mitigation, and remediation
Liaise with technical and business stakeholders
Ensure information security incidents are detected, documented, investigated, and resolved
Create countermeasures and mitigations in response to incidents
Provide operational inputs to threat hunting following incidents or events
Build countermeasures and mitigations addressing commodity and targeted threats
Track evolving threat actor techniques
Provide post-incident recommendations to improve communication, processes, procedures, and mitigation options
Support Threat Hunting, Intelligence, and Monitoring functions through content creation, threat analysis, detection recommendations, and colleague mentoring
Work to restore operations during cyber incidents

Requirements

What you’ll need

Bachelor's Degree and 8 years' experience OR High School Diploma or GED/Equivalent and 12 years' experience in Information Security
2+ years of Threat Hunting experience preferred
Familiarity with MITRE ATT&CK and its application to countermeasure creation is a plus
Experience analyzing, dispositioning, and escalating security events across systems, applications, networks, authentication, and email
Experience translating threat actor techniques into mitigations using YARA, Sigma, or regular expressions
Ability to define security requirements and drive project deliverables
Ability to track multiple incidents and ensure timely responses
Experience responding to cloud-related incidents in Azure, AWS, and Google Cloud
Cloud administrative experience preferred
3+ years of Cyber Incident Response experience required, with Incident Response as the primary job function
Participation in a weekly afterhours on-call rotation required
Strong communication skills and ability to explain complex issues to broader audiences

Benefits

Comp & perks

Variable incentives, bonuses, benefits, and/or other awards may be included in total compensation
Competitive, thoughtfully designed and quality benefits program
Afterhours on-call rotation participation