Cybersecurity Threat Analyst ; Hybrid

Cybersecurity Threat Analyst I

This position is available as a hybrid position in our Sioux Falls, SD or Wilmington, DE office.

At The Bancorp, we've spent more than 25 years driving innovation in the financial services industry. As one of the first banks to embrace fintech, we combine technology, expertise and a forward-looking approach to deliver creative, real-world solutions. We work side by side with our partners to help them grow and innovate with confidence. Across Fintech Solutions, Institutional Banking, Commercial Lending and Real Estate Bridge Lending, we provide the people, processes, technology and banking capabilities that turn bold ideas into outcomes.

Join a team that brings urgency and rigor to every challenge and plays a direct role in driving growth for our clients and the communities we serve.

The Cybersecurity Threat Analyst I role is responsible for monitoring security alerts, logs, and threat intelligence under general supervision to identify suspicious activity. Performs initial triage using established procedures, documents findings, creates or updates tickets, and escalates events requiring deeper investigation or response.

Supports routine vulnerability management, asset review, investigation, reporting, and security awareness activities. Uses approved artificial intelligence (AI) tools for research, query development, evidence summarization, and documentation while validating outputs, following data-handling requirements, and protecting confidential information.

• Monitors security alerts from approved tools and performs initial triage using documented procedures and playbooks.
• Reviews relevant firewall, email, web, domain name system (DNS), endpoint, and other logs to gather evidence and identify indicators of suspicious activity.
• Creates and updates tickets, documents actions taken, and escalates incidents based on defined severity and escalation criteria.
• Supports incident response activities under guidance, including evidence collection, basic scoping, containment tracking, and follow-up documentation.
• Reviews threat intelligence alerts and indicators of compromise for relevance to the environment and escalates significant findings.
• Runs approved vulnerability scans and reviews results to identify potential issues, duplicates, and items requiring validation.
• Collects and reviews asset information, including configurations and running processes, to support investigations and vulnerability management.
• Operates security monitoring tools and performs routine configuration or tuning tasks under guidance.
• Participates in change management activities and follows established security operations procedures.
• Communicates technical findings clearly to cybersecurity team members, internal partners, and vendors.
• Assists with security product evaluations and recommends improvements based on documented requirements.
• Supports security metrics, trend reporting, and assigned security awareness activities.
• Uses approved AI-assisted capabilities to enrich alerts, correlate indicators, summarize evidence, and support basic investigation tasks.
• Uses approved AI assistance to draft basic queries, investigation notes, reports, scripts, and stakeholder communications.
• Validates AI-generated content against authoritative sources and follows approved-use, data-handling, human-review, documentation, and auditability requirements.
• Maintains awareness of emerging threats, including AI-enabled phishing, social engineering, and enterprise AI misuse, and escalates relevant findings.
• Performs other duties as assigned.

• Associate or bachelor's degree in cybersecurity, information technology, computer science, or a related field, or an equivalent combination of education, training, and experience.
• Internships, academic labs, help desk, system administration, network support, or security operations experience may qualify as relevant experience.
• Foundational understanding of cybersecurity principles, common threats, Transmission Control Protocol/Internet Protocol (TCP/IP) networking, and Windows, Linux, or macOS operating systems.
• Basic familiarity with security logs, monitoring tools, vulnerability management concepts, and ticketing workflows.
• Ability to follow documented procedures, maintain accurate records, recognize when additional assistance is needed, and escalate promptly.
• Basic scripting, command-line, or query skills, or a demonstrated willingness to learn tools such as Python, Power Shell, or SQL.
• Familiarity with generative AI and machine learning concepts used in cybersecurity, including common capabilities, limitations, privacy risks, and the need for human validation.
• Clear written and verbal communication, sound organization, and the ability to work effectively in a collaborative environment.
• Coursework, an internship, a lab environment, or hands-on experience related to security operations, threat analysis, incident response, or vulnerability management preferred.
• Familiarity with…