Threat Intelligence Specialist

• Collaborating with security engineering teams to create and test detection rules.
• Investigating potential cybersecurity incidents.
• Developing response processes and training security operations staff.
• Reviewing and tracking detected events to identify new exploits, threats and mitigation strategies, and enforce incident reporting standards.
• Leading in-depth technical analysis of new and emerging information security threats.
• Analyzing threats and vulnerabilities to determine their impact to the bank's operations.
• Assisting with investigations and eDiscovery efforts involving court-proven forensic processes and technologies.

Lead Threat Hunter

Security Analyst

• Execute daily SoD scans to identify potential and effective access violations
• Monitor, triage, and investigate SoD violations, ensuring timely resolution or escalation
• Provide on-demand support to end users and business stakeholders to analyze and remediate access conflicts
• Partner with application owners and access request teams to validate and resolve violations in alignment with policy
• Build, configure, and maintain toxic combination rules within Oracle Identity Manager (OIM)
• Contribute to the design and improvement of SoD control framework within PNC IAM program
• Drive continuous improvement in automation, reporting, and processes related to SoD

Security Analyst – SoD & Access Risk Management

• Evaluate, respond, and mitigate alerts that originate from the SIEM and the Cyber security product suite
• Assist with tuning the SIEM events to reduce the false positives
• Extract the IOCs and behavioral characteristics of malicious samples and implement the proper mitigation (Sandboxing)
• Demonstrate the ability to scope an event to ensure the proper remediation steps
• Perform operational support for the institution as a representative of the security organization
• Conduct security assessments and other information security routines consistently

Security Analyst – SOC

• Recording, tracking and dispositioning of Red Team observations and findings
• Review both past and emerging observations with governance and risk partners
• Produce presentation materials and technical write-ups from red team observations
• Supports activities, process, and tools needed to improve overall security posture of the organization
• Performs investigation and data loss prevention, data manipulation, and coordination of activities

Security Analyst – Red Team

• Protect the cyber assets of FirstEnergy across all subsidiaries and business units
• Apply current cyber security and information security strategies
• Collaborate with various teams and stakeholders
• Report to the Manager of Cyber Security Policy
• Respond to out-of-hours calls during on-call rotation

Cyber and Information Security Analyst – Cyber Security, TSOC

• Operationalize the Intel Lifecycle: Execute the full intelligence lifecycle to perform fusion analysis, develop adversary profiles focused on financial sector threats, produce finished intelligence products across tactical, operational, and strategic levels.
• Tactical Detection Support: Contextualize threat behavior and anticipate adversary actions, translate analyzed TTPs into technical signatures to directly support the SOC and Detection Engineering teams.
• Intelligence-Driven Threat Hunting: Collaborate with the Threat Hunting team to develop hypotheses based on observed adversary behaviors and regional trends, moving beyond simple Indicator of Compromise (IoC) matching.
• Threat and Vulnerability Context: Support attack surface management team, provide intelligence-driven vulnerability prioritization, identify emerging threats and exploitation trends.
• Adversary Emulation: Provide intelligence support for Red Team or Purple Team exercises by profiling relevant threat actors to ensure testing remains realistic and impactful.
• Strategic & Geopolitical Analysis: Analyze global conflicts and economic stability to translate complex threat activities into structured business solutions and "so-what" summaries for leadership.
• Program Development and Engagement: Contribute to the maturation of the CTI program by developing and refining collection requirements, intelligence workflows, reporting templates, and analytic tradecraft standards.
• Production and Reporting: Produce high-quality tactical, operational, and strategic intelligence products including daily threat briefings, threat actor profiles, vulnerability assessments, and executive threat summaries. Deliver timely and actionable intelligence to internal stakeholders.

Cyber Threat Intelligence Analyst

• Prioritize intelligence requirements (IR) and requests for intelligence (RFI), including developing intelligence targeting and collection plans
• Analyze cyber threats; engage stakeholders to determine impact to U.S. Bancorp.
• Monitor a wide array of diverse information sources, ranging from open-source to classified materials for potential threats.
• Maintain a detailed level of awareness of threats to the financial sector.
• Actively participate in the development, documentation, and implementation of new processes to expand and mature capabilities for the organization.

Lead Cyber Threat Intelligence Analyst

• Apply an understanding of DoD, Air Force and common engineering/scientific principles, processes and procedures to improve performance and sustainability of existing and future weapon systems.
• Develop and maintain Risk Management Framework documentation necessary to obtain Authorizations including but not limited to the System Security Plan (SSP), Architecture Analysis Report (AAR), Continuous Monitoring Plan, Security Control Traceability Matrix (SCTM), Security Assessment Report (SAR) and Risk Assessment Report (RAR).
• Lead development and manage coordination/approval of technical documentation for acquisition programs such as Information Support Plans, Cybersecurity Strategies, and Clinger-Cohen Act Compliance.
• Support system engineering and program management in conducting and reviewing milestone documentation including System Requirements Review (SRR), Preliminary Design Reviews (PDR), Critical Design Reviews (CDR) and Program Management Reviews (PMR).
• Perform information system security engineering tasks, ensuring that information security requirements are properly implemented throughout the processes of security architecture, design, development, configuration, and implementation.
• Develop, implement, and enforce information systems security policies ensuring system security requirements are addressed during all phases of the acquisition and Information System lifecycle.
• Review, analyze and validate system security designs within embedded avionics systems to validate security control and architecture implementations.
• Conduct Assessment & Authorization (A&A) tasks in accordance with the Risk Management Framework (RMF) and National Institute of Standards and Technology (NIST) policy; identify deficiencies and provide recommendations of risk mitigation to program management.
• Employ best practices when implementing security controls, including software engineering methodologies, system/security engineering principles, secure design, secure architecture, and secure coding techniques.
• Assist program managers, system engineers and cyber test engineers in conducting Mission Based Cyber Risk Assessments.
• Identify points of vulnerability, non-compliance with established cybersecurity standards and regulations, and recommend mitigation strategies.

Junior System Cybersecurity Analyst – Engineer

Incident Response Analyst

• Perform penetration testing activities
• Supervise, develop, and coach teams
• Manage client service accounts
• Solve and analyze complex problems
• Deliver elevated-quality deliverables
• Lead and execute stealthy penetration testing

Cyber Incident Response Manager

• Produce, analyze, and deliver recurring and ad hoc security metrics and reports to support GSFC leadership, executive committees, and Board-level reporting.
• Develop, maintain, and enhance dashboards and visualizations using Tableau, with a transition to Power BI, to communicate security trends, risks, and operational performance.
• Analyze security operations, threat activity, staffing models (gearing ratios), and tool utilization data to generate clear analytical summaries and actionable insights.
• Collaborate closely with subject matter experts across cyber defense functions, including threat intelligence, perimeter defense, security operations, and incident management, to ensure accuracy and relevance of reporting.
• Translate complex technical and security data into presentations and written materials suitable for senior leadership and cross-functional stakeholders.
• Ensure consistency, accuracy, and integrity of data through validation, documentation, and adherence to established data governance and access control requirements.
• Support internal audits, regulatory examinations, and risk assessments by providing timely, accurate, and well-documented metrics and analyses.
• Perform independent analytical work while maintaining regular engagement with stakeholders to understand evolving reporting needs and security priorities.
• Apply foundational security concepts to interpret data, assess trends, and identify opportunities to improve operational effectiveness and risk management.

Security Analyst – Data Analytics, Optimization

• Execute overnight security operations and ensure alignment with compliance requirements
• Administer and maintain security tools such as XSOAR, Microsoft Sentinel, Palo Alto, and Splunk
• Conduct vulnerability scans and patch management
• Support incident response and documentation
• Assist with vendor engagement and troubleshooting
• Monitor system access and infrastructure integrity
• Recommend innovative solutions to reduce risk and enhance security posture
• Support the development and enforcement of policies and standards
• Align operations with regulatory and compliance mandates

Security Analyst I

• Analyze complex cybersecurity problems to manage workstreams and develop deliverables
• Guide and mentor junior team members
• Build and sustain meaningful client relationships to drive engagement
• Work with team members to enhance operational effectiveness
• Uphold the firm's ethical standards and compliance requirements
• Analyze data to inform decision-making and improve outcomes

See all jobs on JobTailor