Sr. Cyber Security Analyst

US Bank • Cincinnati, OH

254d • $98,175 - $127,050

About The Position

U.S. Bank is seeking an Information Security Analyst to utilize security tools to monitor the U.S. Bancorp network to identify, analyze and respond to cyber security alerts to determine whether a security incident has occurred. The analyst follows standard operating procedures to perform the initial triage and analysis of alerts, and escalates potential incidents to senior analysts or incident response team members. The role offers a hybrid/flexible schedule, which means there's an in-office expectation of 3 or more days per week and the flexibility to work outside the office location for the other days at one of the following locations: Cincinnati, OH. This is also a 1st shift role, Monday - Friday, 8am-5pm.

Requirements

• High School Diploma or equivalent work experience
• Minimum of 2 years of experience in information technology and/or information security and compliance
• Understanding of financial industry legal, regulatory and compliance requirements for information security
• Common ports and services
• IPv4 and IPv6 basic packet structure
• HTTP methods (GET/POST)
• DNS resolution
• SSL/TLS
• Common malware strategies (recon, exploit, callback)
• Types of Security Threats
• MITRE ATT&CK Framework
• 2 Years I.T. experience (System Administration, Network Administration, Pen Tester, Security Administrator, etc.)
• Fundamental networking, TCP/IP understanding
• Strong analytical skills
• 1st/2nd shift flexibility
• Strong written and verbal English communication skills
• Advanced Threat Actors
• Lateral Movement
• Root causes & Attack vectors
• SIEM Platforms
• SOAR Technologies
• Scripting Languages (Python, PowerShell, etc.)

Nice To Haves

• Bachelor's Degree
• At least one Industry accepted security certification
• 5+ years of total IT related experience
• 2+ years' experience working in a Security Operations Center

Responsibilities

• Remediate serious attacks escalated from Tier 1
• Perform in-depth triage of security incidents
• Assist with the development of incident response plans, workflows, and SOPs
• Assist with the development of automation playbooks
• Work with cyber intelligence analysts to convert intelligence into useful detection
• Collaborate with detection team to build and/or tune detection rules and signatures as needed
• Identify root cause and implement proactive/mitigation steps
• Develop and implement detection use cases
• Assist Cyber Security Incident Response (CSIRT) Team with response efforts if/when needed
• Track and report on security metrics
• Utilize IDS, SIEM, SOAR, Endpoint Detection & Response, etc. to monitor the network of USB
• Identify, analyze, and respond to security incidents
• Research security events and incidents to provide details and recommendations
• Follow standard operating procedures (SOPs) to perform internal and external escalations
• Review incidents to assess their urgency and escalate if necessary

Benefits

• Healthcare (medical, dental, vision)
• Basic term and optional term life insurance
• Short-term and long-term disability
• Pregnancy disability and parental leave
• 401(k) and employer-funded retirement plan
• Paid vacation (from two to five weeks depending on salary grade and tenure)
• Up to 11 paid holiday opportunities
• Adoption assistance
• Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Industry: Credit Intermediation and Related Activities
• Education Level: High school or GED