Information Security Analyst III (Incident Response)

Description:
As an Incident Response Analyst, you'll be a member of the bank's Cyber Incident Response team. We are looking for an experienced analyst with proven skillsets to detect and respond to threats in the environment, interact with business stakeholders and work to restore operations. This is a technical role and will support the Threat Hunting, Intelligence, and Monitoring functions with content creation, threat analysis, detection recommendations, and colleague mentoring. Seeking a candidate with strong communication skills to complement their technical skillset providing the ability to distill down complex issues for broader understanding expedited incident management.

Responsibilities:

• Incident Analyst/handler -investigate SIEM/SOAR events as necessary; bring experience in malware analysis, network/endpoint security to respond to and contain incidents.
• Cloud Incident Response - Experience with responding to cloud-related incidents in Azure, AWS and Google cloud.
• Incident Responder/Incident Lead - Lead Incidents, coordinating the investigation, mitigation, and remediation from a technical perspective. Liaise with technical and business stakeholders.
• Incident Management - Ensures Information Security incidents are properly detected, documented, investigated, and resolved.
• Content Development - Support the creation of countermeasures and mitigations in response to an incident.
• Threat Hunting - Support the operational driven inputs (eg. on the heels of an incident or event) into threat hunting and help build countermeasures/mitigations to address commodity and targeted threats. Also build a capability to track evolving threat actor techniques.
• Post Incident Review - Provide recommendations to improve communication, processes, procedures, and mitigation options based on high severity incidents.

Qualifications:
Bachelor's Degree and 6 years of experience in Information Security OR High School Diploma or GED and 10 years of experience in Information Security

Preferred Qualifications:

• Experience responding to cloud-related incidents in Azure, AWS and Google cloud.
• 2 + yrs Cloud administrative experience
• Experience with all aspects of Incident response including stakeholder management.
• Familiarity with MITRE ATT&CK and its application to countermeasure creation is a plus.
• Support the build out of a proactive threat hunting capability.
• Experience analyzing/dispositioning and escalating security events (systems, application, network, authentication email events)
• Experience translating threat actor techniques to building mitigations across a variety of security technologies. This could take the form of Yara, Sigma or Regular Expressions.
• Ability to define security requirements and drive project deliverables.
• Ability to keep track of multiple incidents and ensure responses are provided in a timely fashion.
• This role requires participation in the afterhours on call rotation. Rotations will cycle on a weekly basis.

Preferred Certifications:

• SANS Cloud certifications, such as, GIAC Cloud Forensics Responder (GCFR)

Additional Skills & Qualifications

• Must be open to being on call due to the nature of the position
• Strong communication

Pay and Benefits
The pay range for this position is $140000.00 - $160000.00/yr.
Please review the First Citizens Career page for benefits information.
Workplace Type
This is a fully remote position.
Application Deadline
This position is anticipated to close on Aug 25, 2025.
>About TEKsystems:
We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.

The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

About TEKsystems and TEKsystems Global Services

We're a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. We're a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. We're strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. We're building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.