Cyber Security Data Analyst

Overview

At Regions, the Cyber Security Analyst analyzes, identifies, and documents cybersecurity risks. This role requires a proactive individual with an understanding of core technology and cybersecurity principles, along with industry best practices to investigate, remediate and/or escalate for further evaluation.

• Analyze and respond to cyber threats within various security tools according to documented procedures
• Collaborate with stakeholders within Cyber Security/Technology departments and standard owners to properly document and communicate security risks
• Proactively support a feedback loop related to information and events to identify and support remediation, improving precision and accuracy of analysis
• Review and understand Policies, Standards, and Procedures to improve process flows
• Performs threat hunting, participate in tabletop exercises, and assist in Incident Response on a rotational basis as needed
• Maintain meticulous records of all work performed, including root cause analysis, indicators of compromise, remediation steps, timeline of events, and impact assessment using clear annotations as needed
• Stay abreast of global cybersecurity threat trends
• Support and collaborate with cybersecurity teams to document security posture and assess environment for relevant IOCs and gaps
• Participate in and document various security assessments (e.g., Security Architecture Reviews, Red Team assessments, Purple Team engagements, and tabletop exercises) as needed
• Analyze software for violations of Regions Cyber Security standards as needed
• Act as a coach and mentor to junior analysts
• May lead special projects

This position is exempt from timekeeping requirements under the Fair Labor Standards Act and is not eligible for overtime pay.

• High School Diploma or GED and eight (8) years of related post-secondary education and/or experience in Information Security or Information Technology
• Minimum of two (2) relevant certifications in Information Security or the ability to obtain relevant certifications within twelve months of start date, such as CompTIA Network+/Security+/CySA+, EC-Council CEH, Cisco CCNA/CCNA-Security, GIAC GSEC, etc.
• Willingness and availability to work on a pre-determined shift and rotational on-call

• Minimum of one (1) Intermediate to Advanced AWS or Azure Architect/Administrator and/or Security specialty certification
• Advanced Incident Response, Cyber Leadership, Penetration Testing certifications – GCIH, GSOM, GPEN, CISSP, CISM, OSCP
• Prior working experience in a Security Operations Center (SOC) environment
• Experience developing use cases for a SOC from threat hunting and threat detection engineering to investigation playbook and response procedure development
• Understanding of MITRE ATT&CK Framework and Cyberattack Kill Chain and how these frameworks can identify gaps as well as orient analysts in attack progression

• Self-starter with initiative and drive for continuous improvement
• Team-oriented, collaborative, and focused on group success
• Advanced understanding of information security principles, controls, and technologies
• Strong organizational, research, analytical, and problem-solving skills
• Excellent writing and verbal communication skills
• Strong familiarity with security disciplines such as malware analysis, computer forensics, cyber incident response, network intrusion detection, network traffic and packet analysis, penetration testing, vulnerability scanning, compliance, audit, or cyber threat intelligence
• Strong investigative and problem-solving skills

• Preferred qualifications include hands-on experience leveraging data analytics and visualization tools to support cybersecurity initiatives, including SQL, Snowflake, Power BI, Tableau

• This position is intended to be onsite, with regular in-office requirements (three or more days a week). Regions will not provide relocation assistance. Location options:
  Birmingham, AL;
  Atlanta, GA;
  Nashville, TN; or Charlotte, NC.

• Regions will not sponsor applicants for work visas for this position. Applicants must be authorized to work in the United States on a full-time…