Apply on Employer Site

PNC · 1 day ago

Security Analyst - SOC - 7am EST - 3:30PM EST Tuesday - Saturday

Pittsburgh, PA

Full-time

Onsite

Mid Level

3+ years exp

PNC is a company that values its people as its greatest differentiator and competitive advantage. As a Security Analyst within PNC’s Technology organization, you will evaluate and respond to security alerts, assist in improving the organization's security posture, and conduct security assessments to mitigate risks and vulnerabilities.

BankingFinanceFinancial Services

No H1B

Responsibilities

Evaluate, respond, and mitigate alerts that originate from the SIEM and the Cyber security product suite, e.g. NGFWs, IDS/IPS, Anti-virus, Web Application Firewalls, NAC Solution, EDR, etc

Demonstrate use and understanding of security technologies such as Security Incident and Event Management (SIEM) & Endpoint Detection and Response (EDR)

Assist with tuning the SIEM events to reduce the false positives

Extract the IOCs and behavioral characteristics of malicious samples and implement the proper mitigation (Sandboxing)

Demonstrate the ability to scope an event to ensure the proper remediation steps

Ability to demonstrate subject matter expertise on the one or more functions performed by the SOC

Perform operational support for the institution as a representative of the security organization

Provides technical evaluation and analysis. Supports activities, process, and tools needed to improve overall security posture of the organization

Applies security concepts, reviews information, executes defined tasks, analyzes requirements, reviews logs, and creates documentation. Performs investigation and data loss prevention, data manipulation, and coordination of activities. Performs actions to address or mitigate risks and vulnerabilities. Reviews and defines controls

Advises on more complex security procedures and products for clients, security administrators and network operations. Participates in enforcement of control security risks and threats; potential of one more controls subject to manager discretion. Shares knowledge with staff

Conducts security assessments and other information security routines consistently. Investigates and recommends corrective actions for data security related to established guidelines

Qualification

SIEMEDRInformation SecurityNetwork SecurityRisk AssessmentsAnalytical ThinkingEffective CommunicationsProblem Solving

Required

Evaluate, respond, and mitigate alerts that originate from the SIEM and the Cyber security product suite, e.g. NGFWs, IDS/IPS, Anti-virus, Web Application Firewalls, NAC Solution, EDR, etc

Demonstrate use and understanding of security technologies such as Security Incident and Event Management (SIEM) & Endpoint Detection and Response (EDR)

Assist with tuning the SIEM events to reduce the false positives

Extract the IOCs and behavioral characteristics of malicious samples and implement the proper mitigation (Sandboxing)

Demonstrate the ability to scope an event to ensure the proper remediation steps

Ability to demonstrate subject matter expertise on the one or more functions performed by the SOC

Perform operational support for the institution as a representative of the security organization

Provides technical evaluation and analysis

Supports activities, process, and tools needed to improve overall security posture of the organization

Applies security concepts, reviews information, executes defined tasks, analyzes requirements, reviews logs, and creates documentation

Performs investigation and data loss prevention, data manipulation, and coordination of activities

Performs actions to address or mitigate risks and vulnerabilities

Reviews and defines controls

Advises on more complex security procedures and products for clients, security administrators and network operations

Participates in enforcement of control security risks and threats; potential of one more controls subject to manager discretion

Shares knowledge with staff

Conducts security assessments and other information security routines consistently

Investigates and recommends corrective actions for data security related to established guidelines

Customer Focused - Knowledgeable of the values and practices that align customer needs and satisfaction as primary considerations in all business decisions and able to leverage that information in creating customized customer solutions

Managing Risk - Assessing and effectively managing all of the risks associated with their business objectives and activities to ensure they adhere to and support PNC's Enterprise Risk Management Framework

Roles at this level typically require a university / college degree, with 3+ years of relevant / direct industry experience

Certifications are often desired

In lieu of a degree, a comparable combination of education, job specific certification(s), and experience (including military service) may be considered

Bachelors