Cyber Defense Ops Specialist

Citizens Financial Group, Inc. • Johnston, RI

37d • Onsite

About The Position

The Cyber Defense Ops Specialist is an individual contributor in the Cyber Defense Threat Detection (CDTD) Cyber Defense Operations Center (CDOC), responsible for performing security monitoring, intrusion analysis, incident handling, data loss prevention, privileged user monitoring, security incident management, malware detection/eradication, and recognizing hacker/incident response tactics, techniques, and procedures. This role requires the incumbent to stay current with security technology, the threat landscape, and emerging threats.

Requirements

• 1 or more years of security industry experience preferably in a Security Operations Center (SOC) environment
• Strong verbal and written communication skills including the ability to communicate technical concepts to non-technical audiences.
• Excellent critical thinking, problem-solving, and decision-making skills.
• Must possess active listening, attention to detail, customer service, prioritization, and problem-solving skills.
• Ability to work independently or strategically.
• Experience adapting and demonstrating flexibility while working in a dynamic environment.
• Bachelor's Degree or equivalent combination of experience
• A combination of relevant industry certifications preferred (e.g. Net+, Sec+, CEH, Pentest+, AWS Certified Cloud Practitioner, Microsoft Azure Fundamentals)

Nice To Haves

• Experience or knowledge of the following highly desirable:
• Security Information and Event Management Tools (Arcsight, Splunk, etc.)
• Intrusion Prevention/Detection Tools (FirePower, McAfee, PaloAlto)
• Database Security Tools (Guardium, jSonar)
• Data Loss Prevention Tools (Symantec, Triton, etc.)
• Firewalls (Cisco, Palo Alto, Check Point etc.)
• Application Security Tools (Web Application Firewalls)
• Vulnerability tools
• Cyber Security Incident Response
• Host Intrusion Detection Systems
• XDR and Antivirus Tools (Crowdstrike, Symantec, MS Defender)

Responsibilities

• Performing ongoing monitoring and threat analysis, analyzing logs, NetFlow data, and packet capture.
• Identifying potential IT security incidents and escalating information to appropriate senior staff.
• Assessing threat and vulnerability information from all sources (both internal and external) and promptly applying applicable mitigation techniques.

Benefits

• We offer competitive pay, comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs and more.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Industry: Management of Companies and Enterprises
• Number of Employees: 5,001-10,000 employees