Sr Cyber Defense Ops Spec

Citizens Bank•Johnston, RI

3d•$84,000 - $100,000•Onsite

About The Position

The Sr Cyber Defense Ops Specialist is a senior individual contributor in the Cyber Defense Threat Detection (CDTD) Cyber Defense Operations Center (CDOC). The role performs security monitoring, intrusion analysis, incident handling, data loss prevention, privileged-user monitoring, analyst training, security incident management, malware detection and eradication, and recognition of adversary tactics, techniques, and procedures. The specialist is responsible for one or more security systems and serves as a technical authority for critical operational decisions with significant organizational impact, including security-related decisions across technology and business areas. The position requires staying current with security technology, the threat landscape, and emerging threats, and acting as a subject matter expert who provides management with recommendations and guidance. The role is based at the Citizens Bank Johnston Campus in Johnston, Rhode Island, and is not remote. The schedule is 40 hours per week over four days, Tuesday through Friday, from 7:00 AM to 5:00 PM; the posting identifies the shift as second shift. The salary range is $84,000 to $100,000 per year, with an opportunity to earn an annual discretionary bonus. Actual compensation depends on factors including budget, work location, skills, and experience.

Requirements

At least 3 years of security industry experience, preferably in a Security Operations Center (SOC) environment.
Strong verbal and written communication skills, including the ability to explain technical concepts to non-technical audiences.
Excellent critical-thinking, problem-solving, and decision-making skills.
Active listening, attention to detail, customer service, and prioritization skills.
Ability to work independently or strategically.
Ability to adapt and demonstrate flexibility in a dynamic environment.
Bachelor’s degree or an equivalent combination of experience.

Nice To Haves

Experience with Security Information and Event Management (SIEM) tools such as ArcSight or Splunk.
Experience with intrusion prevention/detection tools such as FirePower or McAfee.
Experience with database security tools such as Guardium or jSonar.
Experience with data loss prevention tools such as Symantec or Triton.
Experience with firewalls such as Cisco, Palo Alto, or Check Point.
Experience with application security tools, including web application firewalls.
Experience with vulnerability tools.
Experience with cybersecurity incident response.
Experience with host intrusion detection systems.
Experience with XDR and antivirus tools such as CrowdStrike, Symantec, or Microsoft Defender.
Relevant industry certifications, such as Net+, Sec+, CySA+, CEH, Pentest+, GCFA, GSOC, AWS Certified Cloud Practitioner, or Microsoft Azure Fundamentals.

Responsibilities

Perform ongoing security monitoring and threat analysis, including analysis of logs, NetFlow data, and packet captures.
Identify potential IT security incidents and escalate information to appropriate incident-response senior staff.
Assess threat and vulnerability information from internal and external sources and promptly apply applicable mitigation techniques.
Develop meaningful metrics that reflect the environment’s security posture and support risk-informed organizational decisions.
Use information from cybersecurity tools and processes to assess potential security and business impacts and communicate recommendations to management.
Represent Cyber Defense on security- or risk-related initiatives and working groups requiring technical skills and security expertise.
Proactively protect, monitor, investigate, and resolve threats to the secure user environment and company assets.
Perform intrusion analysis, incident handling, data loss prevention, privileged-user monitoring, analyst training, security incident management, and malware detection and eradication.
Maintain current knowledge of security technology, the threat landscape, emerging threats, and adversary tactics, techniques, and procedures.
Serve as a technical authority and subject matter expert, providing management with recommendations and guidance.

Benefits

Competitive pay
Comprehensive medical coverage
Dental coverage
Vision coverage
Retirement benefits
Maternity and paternity leave
Flexible work arrangements
Education reimbursement
Wellness programs
Paid time off policy exceeding mandatory paid sick or paid time-away requirements in every U.S. local and state jurisdiction
Opportunity to earn an annual discretionary bonus