Security Analyst - SOC - Tuesday - Saturday 7am EST - 3:30pm EST

PNC•Strongsville, OH

2d•$75,000 - $137,500•Onsite

About The Position

As a Security Analyst within PNC’s Technology organization, you will be based in Pittsburgh, PA; Cleveland, OH; or Birmingham, AL. The work shift will be: Tuesday - Saturday - 7:00am EST - 3:30pm EST. This role provides technical evaluation and analysis, supporting activities, processes, and tools needed to improve the overall security posture of the organization. It involves applying security concepts, reviewing information, executing defined tasks, analyzing requirements, reviewing logs, and creating documentation. The analyst will perform investigation and data loss prevention, data manipulation, and coordination of activities. They will also take actions to address or mitigate risks and vulnerabilities, review and define controls, and advise on more complex security procedures and products for clients, security administrators, and network operations. Participation in the enforcement of control security risks and threats is also a component, with potential for one or more controls subject to manager discretion. Knowledge sharing with staff and conducting security assessments and other information security routines consistently are expected. The role also involves investigating and recommending corrective actions for data security related to established guidelines.

Requirements

Demonstrates intimate knowledge of the following: Evaluate, respond, and mitigate alerts that originate from the SIEM and the Cyber security product suite, e.g. NGFWs, IDS/IPS, Anti-virus, Web Application Firewalls, NAC Solution, EDR, etc.
Demonstrate use and understanding of security technologies such as Security Incident and Event Management (SIEM) & Endpoint Detection and Response (EDR)
Ability to demonstrate subject matter expertise on one or more functions performed by the SOC
Customer Focused - Knowledgeable of the values and practices that align customer needs and satisfaction as primary considerations in all business decisions and able to leverage that information in creating customized customer solutions.
Managing Risk - Assessing and effectively managing all of the risks associated with their business objectives and activities to ensure they adhere to and support PNC's Enterprise Risk Management Framework.
University / college degree, with 3+ years of relevant / direct industry experience.
In lieu of a degree, a comparable combination of education, job specific certification(s), and experience (including military service) may be considered.
Bachelors

Nice To Haves

Access Control (AC)
Building Architecture
Customer Solutions
Cyber Threat Hunting
Disaster Recovery Planning
Endpoint Detection and Response (EDR)
Information Security
Network Security
Physical Security
Risk Assessments
Security Technologies
Threat Detection
Analytical Thinking
Effective Communications
Information Assurance
Information Security Management
Information Security Technologies
IT Environment
IT Standards, Procedures & Policies
IT Systems Management
Problem Solving
Software Security Assurance
Certifications are often desired.

Responsibilities

Evaluate, respond, and mitigate alerts that originate from the SIEM and the Cyber security product suite, e.g. NGFWs, IDS/IPS, Anti-virus, Web Application Firewalls, NAC Solution, EDR, etc.
Demonstrate use and understanding of security technologies such as Security Incident and Event Management (SIEM) & Endpoint Detection and Response (EDR)
Assist with tuning the SIEM events to reduce the false positives
Extract the IOCs and behavioral characteristics of malicious samples and implement the proper mitigation (Sandboxing)
Demonstrate the ability to scope an event to ensure the proper remediation steps
Ability to demonstrate subject matter expertise on one or more functions performed by the SOC
Perform operational support for the institution as a representative of the security organization.
Applies security concepts, reviews information, executes defined tasks, analyzes requirements, reviews logs, and creates documentation.
Performs investigation and data loss prevention, data manipulation, and coordination of activities.
Performs actions to address or mitigate risks and vulnerabilities.
Reviews and defines controls.
Advises on more complex security procedures and products for clients, security administrators and network operations.
Participates in enforcement of control security risks and threats; potential of one more controls subject to manager discretion.
Shares knowledge with staff.
Conducts security assessments and other information security routines consistently.
Investigates and recommends corrective actions for data security related to established guidelines.

Benefits

medical/prescription drug coverage (with a Health Savings Account feature)
dental and vision options
employee and spouse/child life insurance
short and long-term disability protection
401(k) with PNC match
pension and stock purchase plans
dependent care reimbursement account
back-up child/elder care
adoption, surrogacy, and doula reimbursement
educational assistance, including select programs fully paid
a robust wellness program with financial incentives
maternity and/or parental leave
up to 11 paid holidays each year
9 occasional absence days each year, unless otherwise required by law
between 15 to 25 vacation days each year, depending on career level; and years of service.