Description Cyber Defense Specialist – 3rd Shift – Sunday through Wednesday This 3rd shift opportunity is an individual contributor role on the Cyber Threat Detection (CTD) team. In this role, you will be responsible for performing security monitoring, intrusion analysis, incident handling, data loss prevention, security incident management, malware detection/eradication, and recognizing hacker/incident response tactics, techniques, and procedures. This role will require you to have basic knowledge of the latest security technologies and the current threat landscape while collaborating closely with other Cyber Defense pillars to ensure a robust security posture. The individual will be: + Performing ongoing monitoring and threat analysis, analyzing logs, net flow data, and packet capture to protect against, and resolve threats to the environment and company assets. + Investigating potential IT security incidents and performing remediation or escalating incidents to appropriate Incident Response staff. + Assessing threat and vulnerability information from all sources (both internal and external) and applying applicable mitigation techniques. + Using information from cyber security tools and processes, assessing potential security and business impacts while presenting recommendations to management. + Representing Cyber Defense as needed on security or risk-related initiatives where technical skills and security expertise are required. + Cultivating Innovation by identifying new and better ways for the team to enhance processes, procedures, and alerting capabilities. This 4 day, 40 hours per week role is a 3rd shift, Sunday through Wednesday opportunity in our Security Operation Center with the hours of 11:00PM – 9:00AM and is based in our Johnston, Rhode Island location and is not being considered for remote work. Experience and Skills: + 1 or more years of security industry experience preferably in a Security Operations Center (SOC) environment + Experience or knowledge of the following highly desirable: + Security Information and Event Management Tools (Arcsight, Splunk, etc.) + Intrusion Prevention/Detection Tools (FirePower, McAfee, PaloAlto) + Database Security Tools (Guardium, jSonar) + Data Loss Prevention Tools (Symantec, Triton, etc.) + Firewalls (Cisco, Palo Alto, Check Point etc.) + Application Security Tools (Web Application Firewalls) + Vulnerability tools + Cyber Security Incident Response + Host Intrusion Detection Systems + XDR and Antivirus Tools (Crowdstrike, Symantec, MS Defender) + Strong verbal and written communication skills including the ability to communicate technical concepts to non-technical audiences. + Excellent critical thinking, problem-solving, and decision-making skills. + Must possess active listening, attention to detail, customer service, prioritization, and problem-solving skills. + Ability to work independently and strategically. + Experience adapting and demonstrating flexibility while working in a dynamic environment. Education and Certifications + Bachelor’s Degree or equivalent combination of experience + A combination of relevant industry certifications preferred (e.g. Net+, Sec+, CEH, Pentest+, AWS Certified Cloud Practitioner, Microsoft Azure Fundamentals) Hours & Work Schedule Hours per Week: 40 Hrs. (4 days per week) Work Schedule: 11:00PM – 9:00AM (Sunday through Wednesday) Location: Citizens Bank Johnston Campus (this is not a remote opportunity) Pay Transparency The salary range for this position is $66,320 - $99,480 per year. Actual pay is based on various factors including but not limited to the work location, and relevant skills and experience. We offer competitive pay, comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs and more. Note, Citizens’ paid time off policy exceeds the mandatory, paid sick or paid time-away policy of very local and state jurisdiction in the United States. For an overview of our benefits, visit https://jobs.citizensbank.com/benefits . Some job boards have started using jobseeker-reported data to estimate salary ranges for roles. If you apply and qualify for this role, a recruiter will discuss accurate pay guidance. Equal Employment Opportunity At Citizens, we are committed to fostering an inclusive culture that enables colleagues to bring their best selves to work every day. Employment decisions are based solely on experience, performance, and ability. Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression (including transgender individuals who are transitioning, have transitioned, or are perceived to be transitioning to the gender with which they identify), genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague’s or a dependent’s reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws. Equal Employment and Opportunity Employer Citizens is a brand name of Citizens Bank, N.A. and each of its respective affiliates. Why Work for Us At Citizens, you'll find a customer-centric culture built around helping our customers and giving back to our local communities. When you join our team, you are part of a supportive and collaborative workforce, with access to training and tools to accelerate your potential and maximize your career growth Background Check Any offer of employment is conditioned upon the candidate successfully passing a background check, which may include initial credit, motor vehicle record, public record, prior employment verification, and criminal background checks. Results of the background check are individually reviewed based upon legal requirements imposed by our regulators and with consideration of the nature and gravity of the background history and the job offered. Any offer of employment will include further information. 01/13/2025