Security Analyst - SOC - Tuesday - Saturday - 3:00pm EST - 11:30pm EST

PNC Bank•Denver, CO

5h•Onsite

About The Position

PNC is hiring a Security Analyst within its Technology organization. The role is based in Pittsburgh, Pennsylvania; Denver, Colorado; Phoenix, Arizona; Cleveland, Ohio; or Birmingham, Alabama, and is performed in-office. The scheduled shift is Tuesday through Saturday, 3:00 p.m. to 11:30 p.m. EST. The Security Analyst evaluates and analyzes security activity, supports the processes and tools used to improve the organization’s security posture, and performs security operations and investigations. This includes reviewing alerts and logs, investigating potential incidents and data loss, assessing risks and vulnerabilities, recommending corrective actions, and helping enforce security controls. The analyst also documents work, coordinates security activities, advises on more complex procedures and products, and shares knowledge with staff. In the SOC-focused work, the analyst evaluates, responds to, and mitigates alerts from SIEM and other cybersecurity products, including next-generation firewalls, IDS/IPS, antivirus, web application firewalls, network access control, and EDR. The role also includes tuning SIEM events to reduce false positives, extracting indicators of compromise and behavioral characteristics from malicious samples, applying mitigations such as sandboxing, and scoping events to determine appropriate remediation.

Requirements

Typically, a university or college degree and at least 3 years of relevant or direct industry experience are required; a comparable combination of education, job-specific certifications, and experience, including military service, may be considered in lieu of a degree.
Demonstrated knowledge and ability to evaluate and mitigate security alerts and work with SIEM and EDR technologies.
Ability to scope security events and determine appropriate remediation.
Relevant skills and competencies include analytical thinking, effective communications, information assurance, information security management and technologies, IT environment and systems management, IT standards, procedures and policies, problem solving, and software security assurance.

Nice To Haves

Preferred skills: cyber threat intelligence, data security, fraud prevention, information security, intrusion detection, network security, security audit, security evaluations, security operations, and vulnerability assessments.
Certifications are often desired.

Responsibilities

Evaluate, respond to, and mitigate alerts originating from SIEM and cybersecurity products such as NGFWs, IDS/IPS, antivirus, web application firewalls, NAC, and EDR.
Use and apply security technologies, including SIEM and EDR.
Assist with tuning SIEM events to reduce false positives.
Extract indicators of compromise and behavioral characteristics from malicious samples and implement appropriate mitigations, including sandboxing.
Scope security events to determine appropriate remediation steps.
Provide subject matter expertise in one or more SOC functions.
Provide operational support for the institution as a representative of the security organization.
Perform technical evaluation and analysis, review information and logs, execute defined tasks, and create documentation.
Investigate data security issues and coordinate activities involving data loss prevention and data manipulation.
Take action to address or mitigate risks and vulnerabilities; review and define controls.
Advise on more complex security procedures and products for clients, security administrators, and network operations.
Participate in enforcing controls against security risks and threats.
Conduct security assessments and other information security routines consistently.
Investigate data security matters and recommend corrective actions consistent with established guidelines.
Share knowledge with staff.

Benefits

Medical and prescription drug coverage, with a Health Savings Account feature
Dental and vision options
Employee and spouse/child life insurance
Short- and long-term disability protection
401(k) with PNC match
Pension and stock purchase plans
Dependent care reimbursement account
Back-up child and elder care
Adoption, surrogacy, and doula reimbursement
Educational assistance, including select programs that are fully paid
Wellness program with financial incentives
Maternity and/or parental leave
Up to 11 paid holidays each year
9 occasional absence days each year, unless otherwise required by law
Between 15 and 25 vacation days each year, depending on career level and years of service