Cyber Defense Ops Specialist

Citizens Bank • Johnston, RI

3d • $66,320 - $90,000 • Onsite

About The Position

The Cyber Defense Ops Specialist is an individual contributor in the Cyber Defense Threat Detection (CDTD) Cyber Defense Operations Center (CDOC). The role performs security monitoring, intrusion analysis, incident handling, data loss prevention, privileged user monitoring, security incident management, and malware detection and eradication. It also involves recognizing hacker and incident-response tactics, techniques, and procedures. The specialist is expected to stay current with security technology, the threat landscape, and emerging threats.

The position is based at the Citizens Bank Johnston Campus and is not remote. The schedule is 40 hours per week over four days, from 3 p.m. to 1 a.m., Sunday through Wednesday. The salary range is $66,320–$90,000, with an opportunity to earn an annual discretionary bonus. Actual pay depends on factors including budget, work location, and relevant skills and experience.

Requirements

• At least 1 year of security industry experience, preferably in a Security Operations Center (SOC) environment.
• Strong verbal and written communication skills, including the ability to communicate technical concepts to non-technical audiences.
• Excellent critical-thinking, problem-solving, and decision-making skills.
• Active listening, attention to detail, customer service, prioritization, and problem-solving skills.
• Ability to work independently or strategically.
• Experience adapting and demonstrating flexibility in a dynamic environment.
• Bachelor’s degree or an equivalent combination of experience.

Nice To Haves

• Experience or knowledge of Security Information and Event Management tools, such as ArcSight and Splunk.
• Experience or knowledge of intrusion prevention/detection tools, such as FirePower, McAfee, and Palo Alto.
• Experience or knowledge of database security tools, such as Guardium and jSonar.
• Experience or knowledge of data loss prevention tools, such as Symantec and Triton.
• Experience or knowledge of firewalls, such as Cisco, Palo Alto, and Check Point.
• Experience or knowledge of application security tools, including web application firewalls.
• Experience or knowledge of vulnerability tools.
• Experience or knowledge of cybersecurity incident response.
• Experience or knowledge of host intrusion detection systems.
• Experience or knowledge of XDR and antivirus tools, such as CrowdStrike, Symantec, and Microsoft Defender.
• Relevant industry certifications, such as Net+, Sec+, CEH, Pentest+, AWS Certified Cloud Practitioner, or Microsoft Azure Fundamentals.

Responsibilities

• Perform ongoing security monitoring and threat analysis, including analyzing logs, NetFlow data, and packet captures.
• Identify potential IT security incidents and escalate information to appropriate senior staff.
• Assess threat and vulnerability information from internal and external sources and promptly apply applicable mitigation techniques.
• Perform intrusion analysis, incident handling, data loss prevention, privileged user monitoring, security incident management, and malware detection and eradication.
• Recognize hacker and incident-response tactics, techniques, and procedures.
• Stay current with security technology, the threat landscape, and emerging threats.

Benefits

• Competitive pay and an opportunity to earn an annual discretionary bonus.
• Comprehensive medical coverage.
• Dental coverage.
• Vision coverage.
• Retirement benefits.
• Maternity and paternity leave.
• Flexible work arrangements.
• Education reimbursement.
• Wellness programs.
• Paid time off exceeding applicable mandatory paid sick or paid time-away requirements.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level