Vulnerability and Attack Surface Management Analyst

First Citizens Bank hiring for Vulnerability and Attack Surface Management Analyst jobs in Creedmoor, NC, US

This position supports Information Security and Vulnerability Management programs within the Bank at an advanced level of ability. Analyzes vulnerability and threat data to provide actionable intelligence for cyber defense efforts. Evaluates the Bank's networks and systems to identify technical security gaps or deficiencies. Recommends process improvements and technical solutions to address the identified gaps or deficiencies. Facilitates the defense of the organization's information security and technological architecture through ongoing reporting and escalation of emerging threats. May provide guidance for less experienced associates in the work group or assist special projects.

• Security Review – Monitors open source and vendor releases for the latest intelligence on vulnerabilities, exploits, and attacks.  Monitors external attack surface management tools to identify changes to the internet perimeter.  Uses internal asset management systems to understand the systems and applications in use within the Bank.  Reviews vulnerability scan findings to ensure remediation targets are met.
• Analysis - Analyzes vulnerability, exploit, and inventory data and determines what remediation path is appropriate.  Identifies underlying causes when remediation targets are not being met and recommends patching and remediation process improvements.
• Business Support – Supports the defense of the organization's information security and technological architecture through a number of operational and technical tasks. Ensures all vulnerability intelligence and attack surface management systems are online and fully operational as well as ensuring compliance with all security policies and standards. Maintains current knowledge about vulnerabilities, exploits, attack trends, and cyber-intel as well as news and reports from industry sources. Participates in the creation and maintenance of processes and procedures. May answer inquiries from customers and external business partners regarding external attack surface risk scores.
• Reporting – Documents and presents vulnerability analysis reports to peers and information technology and information security leadership.  Provides analytics and reporting that facilitates vulnerability management operations. Conveys information to the appropriate parties, which includes both internal and external partners.

Bachelor's Degree and 4 years of experience in Information security OR High School Diploma or GED and 8 years of experience in Information security

License or Certification Type: null null

Skill(s): Active listening and assimilation of information skills, Ability to travel as needed

First Citizens benefits programs are designed to meet our Associates where they are in life.  Full-time associates (20+ hours) are offered a comprehensive benefits program, with customized offerings, including those designed to support families, however defined.  More information regarding our benefits offerings can be found here:  https://jobs.firstcitizens.com/benefits