As the Principal Cyber Defense Ops Spec, you will be responsible for performing security monitoring, intrusion analysis, incident handling, data loss prevention, privileged user monitoring, security incident management, malware detection/eradication, and recognizing hacker/incident response tactics, techniques, and procedures. This role is for a senior level individual contributor role on the Cyber Defense Threat Detection (CDTD) team reporting to the Mgr. Cyber Defense Ops and you will be working closely with all the CDTD, Security Intelligence, Content Engineering, and Attack Surface Management teams as well as other internal Citizens teams. You will have responsibility for one or more of the security systems aligned with their specific function, either directly or indirectly; and will be a technical authority for critical operational decisions having significant impact to the organization with authority extending beyond the team to include both technology and business line areas in security related decisions. This role requires you to stay current with security technology, the threat landscape, and emerging threats, and you will act as a subject matter expert in their specific disciplines and will provide mentorships, act as an escalation point to other analysts and advise management with recommendations and guidance as needed.
Primary responsibilities include
- Assist in providing direction for Cyber Defense teams, to include mentoring and collaborating on building security operations functions that span the CS&R portfolio of security controls.
- Review technologies/services and make recommendations on use, while continuing to focus on business enablement.
- Recommend and implement continuous improvements to security services and applications.
- Responsible for providing recommendations for effectively implementing technical layers of monitoring defense using a risk based approach.
- Developing meaningful metrics to reflect the true posture of the environment allowing the organization to make educated decisions based on risk.
- Representing Cyber Defense as needed on security related or risk related initiatives or working groups where technical skills and security expertise are required.
- Proactively protecting, monitoring, investigating and resolving threats to secure user environment and company assets.
Qualifications, Education, Certifications and/or Other Professional Credentials
- Required Qualifications
- Enter text here
- Add or delete bullets, as applicable
- Preferred Qualifications
- Enter text here
- Add or delete bullets, as applicable
Hours & Work Schedule
- Hours per Week:
- Work Schedule: