Cyber Defense Ops Specialist

Citizens Financial Group • Johnston, RI

3d • Onsite

About The Position

The Cyber Defense Ops Specialist is an individual contributor in the Cyber Defense Threat Detection (CDTD) Cyber Defense Operations Center (CDOC). The role performs security monitoring, intrusion analysis, incident handling, data loss prevention, privileged user monitoring, security incident management, malware detection and eradication, and recognition of hacker and incident-response tactics, techniques, and procedures. The specialist is expected to stay current with security technology, the threat landscape, and emerging threats.

This onsite position is based at Citizens Bank Johnston Campus. The schedule is 40 hours per week over four days, Sunday through Wednesday, from 3 p.m. to 1 a.m. The salary range is $66,320–$90,000, with an opportunity to earn an annual discretionary bonus. Actual pay depends on factors including budget, work location, and relevant skills and experience.

Requirements

• At least 1 year of security industry experience; experience in a Security Operations Center (SOC) environment is preferred.
• Strong verbal and written communication skills, including the ability to explain technical concepts to non-technical audiences.
• Excellent critical-thinking, problem-solving, and decision-making skills.
• Active listening, attention to detail, customer service, prioritization, and problem-solving skills.
• Ability to work independently or strategically.
• Ability to adapt and demonstrate flexibility in a dynamic environment.
• A bachelor's degree or an equivalent combination of experience.

Nice To Haves

• Experience or knowledge of Security Information and Event Management (SIEM) tools such as ArcSight and Splunk.
• Experience or knowledge of intrusion prevention/detection tools such as FirePower, McAfee, and Palo Alto.
• Experience or knowledge of database security tools such as Guardium and jSonar.
• Experience or knowledge of data loss prevention tools such as Symantec and Triton.
• Experience or knowledge of firewalls such as Cisco, Palo Alto, and Check Point.
• Experience or knowledge of application security tools, including web application firewalls.
• Experience or knowledge of vulnerability tools.
• Experience or knowledge of cybersecurity incident response.
• Experience or knowledge of host intrusion detection systems.
• Experience or knowledge of XDR and antivirus tools such as CrowdStrike, Symantec, and Microsoft Defender.
• Relevant industry certifications, such as Net+, Sec+, CEH, Pentest+, AWS Certified Cloud Practitioner, or Microsoft Azure Fundamentals.

Responsibilities

• Perform ongoing security monitoring and threat analysis.
• Analyze logs, NetFlow data, and packet captures.
• Identify potential IT security incidents and escalate information to appropriate senior staff.
• Assess threat and vulnerability information from internal and external sources and promptly apply applicable mitigation techniques.
• Perform intrusion analysis, incident handling, data loss prevention, privileged user monitoring, security incident management, and malware detection and eradication.
• Recognize hacker and incident-response tactics, techniques, and procedures.
• Stay current with security technology, the threat landscape, and emerging threats.

Benefits

• Competitive pay
• Comprehensive medical coverage
• Dental coverage
• Vision coverage
• Retirement benefits
• Maternity and paternity leave
• Flexible work arrangements
• Education reimbursement
• Wellness programs
• Paid time off exceeding mandatory paid sick or paid time-away policies in every applicable U.S. local and state jurisdiction
• Opportunity to earn an annual discretionary bonus

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level