Cyber Security Analyst - Associate

Sumitomo Mitsui Banking Corporation • Charlotte, NC

18d • Hybrid

About The Position

As a Cyber Security Analyst, you will help protect SMBC Group by monitoring, investigating, and responding to cyber security threats within the Security Operations Center (SOC). You will analyze alerts, manage security incidents, and strengthen detection and response capabilities. The role offers opportunities to develop expertise in threat hunting, incident response, digital forensics, purple teaming, detection engineering, security automation, and threat intelligence. You will work with a global team and a broad range of security technologies to improve the organization’s ability to prevent, detect, and respond to evolving threats.

SMBC employees participate in a hybrid workforce model that provides the opportunity to work from home and from an SMBC office. Employees must live within a reasonable commuting distance of their office location. Candidates will learn about the specific hybrid work schedule during the interview process. Hybrid work may not be permitted for certain roles.

Requirements

• 2 to 5 years of experience in cyber security, preferably within a SOC, DFIR, or CSIRT environment.
• Experience investigating security alerts, incidents, and threat activity.
• Strong analytical, problem-solving, and incident investigation skills.
• Strong written and verbal communication skills, including the ability to document technical findings clearly.
• Knowledge of security monitoring and response technologies, including SIEM, EDR, NDR, XDR, and UEBA platforms.
• Understanding of cyber security attack frameworks, including MITRE ATT&CK and Cyber Kill Chain.
• Experience with incident response, threat hunting, and security event analysis.
• Strong knowledge of Windows and Linux operating systems.
• Experience with Active Directory environments.
• Understanding of cloud technologies and associated security considerations.
• Ability to work independently and manage multiple priorities effectively.
• Strong organizational skills and attention to detail in a service-focused environment.

Nice To Haves

• Experience with digital forensics, purple teaming, detection engineering, security automation, or threat intelligence.
• Experience implementing or supporting enterprise security technologies.
• Industry certifications such as GCIH, GNFA, GFCA, CEH, OSCP, CISSP, or equivalent.
• Experience working within global or large-scale enterprise environments.

Responsibilities

• Monitor, investigate, and respond to security alerts, events, and incidents across the enterprise.
• Analyze incidents to determine root cause, scope, impact, and containment actions.
• Conduct proactive threat hunting to identify emerging threats and suspicious activity.
• Maintain and improve monitoring procedures, response playbooks, and operational processes.
• Partner with detection engineering and automation teams to enhance security monitoring and response capabilities.
• Test and evaluate new attacker techniques, tactics, and procedures (TTPs) to validate detection and response effectiveness.
• Support the implementation, administration, and continuous improvement of security tools and platforms.
• Contribute to projects and initiatives that strengthen SOC operations, security controls, and overall cyber defense capabilities.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: No Education Listed