Security Analyst - SOC - Tuesday - Saturday - 3:00pm EST - 11:30pm EST

PNC•Strongsville, OH

2d•$75,000 - $137,500•Onsite

About The Position

At PNC, the Security Analyst works within the Technology organization to help improve the organization’s overall security posture. The position is based in Pittsburgh, PA; Denver, CO; Phoenix, AZ; Cleveland, OH; or Birmingham, AL, and is an in-office role. The scheduled shift is Tuesday through Saturday, 3:00 p.m. to 11:30 p.m. EST. The analyst evaluates, responds to, and mitigates alerts from SIEM and other cybersecurity products; supports SIEM tuning; extracts indicators of compromise and behavioral characteristics from malicious samples; and scopes events to determine remediation steps. The role also provides operational security support and subject matter expertise in one or more SOC functions. Responsibilities include technical evaluation and analysis, reviewing logs and information, executing defined security tasks, investigating data security issues, coordinating activities, documenting work, and taking steps to address risks and vulnerabilities. The analyst reviews and defines controls, advises on complex security procedures and products, participates in enforcing controls against security risks and threats, shares knowledge with staff, and conducts security assessments and other information security routines. The position investigates issues and recommends corrective actions in accordance with established guidelines. PNC emphasizes customer focus, risk management, and an inclusive workplace. Employment visa sponsorship and STEM OPT participation are not provided for this position.

Requirements

Typically requires a university or college degree and 3 or more years of relevant or direct industry experience; a comparable combination of education, job-specific certifications, and experience, including military service, may be considered in lieu of a degree.
Bachelor’s degree listed under Education.
Demonstrated appropriate knowledge, skills, and abilities for the role.
Knowledge of SIEM and EDR technologies.
Work in an in-office setting at one of the listed locations.
Ability to work Tuesday through Saturday, 3:00 p.m. to 11:30 p.m. EST.
Employment visa sponsorship and STEM OPT participation are not available for this position.

Nice To Haves

Certifications are often desired, though none are required.
Preferred skills include cyber threat intelligence, data security, fraud prevention, information security, intrusion detection, network security, security audit, security evaluations, security operations, and vulnerability assessments.
Competencies include analytical thinking, effective communications, information assurance, information security management, information security technologies, IT environment, IT standards, procedures and policies, IT systems management, problem solving, and software security assurance.

Responsibilities

Evaluate, respond to, and mitigate alerts originating from SIEM and cybersecurity products such as NGFWs, IDS/IPS, antivirus, web application firewalls, NAC solutions, and EDR.
Use and apply security technologies, including SIEM and EDR.
Assist with tuning SIEM events to reduce false positives.
Extract indicators of compromise and behavioral characteristics from malicious samples and implement appropriate mitigation, including sandboxing.
Scope security events and determine appropriate remediation steps.
Provide subject matter expertise in one or more SOC functions.
Perform operational support for the institution as a representative of the security organization.
Provide technical evaluation and analysis to support improvement of the organization’s security posture.
Review information and logs, execute defined tasks, analyze requirements, and create documentation.
Perform investigations and data loss prevention, data manipulation, and coordination of activities.
Take actions to address or mitigate risks and vulnerabilities; review and define controls.
Advise on complex security procedures and products for clients, security administrators, and network operations.
Participate in enforcing controls against security risks and threats and share knowledge with staff.
Conduct security assessments and other information security routines.
Investigate data security issues and recommend corrective actions consistent with established guidelines.

Benefits

Medical and prescription drug coverage, including a Health Savings Account feature, subject to eligibility.
Dental and vision options.
Employee and spouse/child life insurance.
Short- and long-term disability protection.
401(k) with PNC match.
Pension and stock purchase plans.
Dependent care reimbursement account.
Back-up child and elder care.
Adoption, surrogacy, and doula reimbursement.
Educational assistance, including select programs that are fully paid.
Wellness program with financial incentives.
Maternity and/or parental leave, depending on eligibility.
Up to 11 paid holidays each year, depending on eligibility.
9 occasional absence days each year, unless otherwise required by law.
15 to 25 vacation days each year depending on career level and years of service, subject to eligibility.
Incentive-eligible compensation based on company, business, and/or individual performance.