Sr. Cyber Security Analyst

<p><span>At U.S. Bank, we’re on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions, enabling the communities we support to grow and succeed in the right ways, all more confidently and more often—that’s what we call the courage to thrive.   We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive. Try new things, learn new skills and discover what you excel at—all from Day One. </span></p><p></p><p><span>As a wholly owned subsidiary of U.S. Bank, Elavon is committed to building the platforms and ecosystems that help over 1.5 million customers around the world to achieve their financial goals—no matter what they need. From transaction processing to customer service, to driving innovation and launching new products, we’re building a range of tailored payment solutions powered by the latest technology. As part of our team, you can explore what motivates and energizes your career goals: partnering with our customers, our communities, and each other. </span></p><p></p><p></p><p></p><h2><b><u>Job Description</u></b></h2><p>U.S. Bank is seeking an<b> Information Security Analyst</b> to <span>utilize security tools to monitor the U.S. Bancorp network to identify, analyze and respond to cyber security alerts to determine whether a security incident has occurred. </span></p><p></p><p><span>The analyst follows standard operating procedures to perform the initial triage and analysis of alerts, and escalates potential incidents to senior analysts or incident response team members</span></p><p></p><p></p><p><b><span>RESPONSIBILITIES</span></b></p><p></p><ul><li><p>Remediate serious attacks escalated from Tier 1</p></li><li><p>Perform in-depth triage of security incidents</p></li><li><p>Assist with the development of incident response plans, workflows, and SOPs</p></li><li><p>Assist with the development of automation playbooks</p></li><li><p>Work with cyber intelligence analysts to convert intelligence into useful detection</p></li><li><p>Collaborate with detection team to build and/or tune detection rules and signatures as needed</p></li><li><p>Identify root cause and implement proactive/mitigation steps</p></li><li><p>Develop and implement detection use cases</p></li><li><p>Assist Cyber Security Incident Response (CSIRT) Team with response efforts if/when needed</p></li><li><p>Track and report on security metrics</p></li><li><p>Utilize IDS, SIEM, SOAR, Endpoint Detection &amp; Response, etc. to monitor the network of USB</p></li><li><p>Identify, analyze, and respond to security incidents</p></li><li><p>Research security events and incidents to provide details and recommendations</p></li><li><p>Follow standard operating procedures (SOPs) to perform internal and external escalations</p></li><li><p>Review incidents to assess their urgency and escalate if necessary</p></li></ul><p></p><p></p><p><b><span>EXPERIENCE SHOULD INCLUDE</span></b></p><ul><li><p>Common ports and services</p></li><li><p>IPv4 and IPv6 basic packet structure</p></li><li><p>HTTP methods (GET/POST)</p></li><li><p>DNS resolution</p></li><li><p>SSL/TLS</p></li><li><p>Common malware strategies (recon, exploit, callback)</p></li><li><p>Types of Security Threats</p></li><li><p>MITRE ATT&amp;CK Framework</p></li></ul><ul><li><p>2 Years I.T. experience (System Administration, Network Administration, Pen Tester, Security Administrator, etc.)</p></li><li><p>Fundamental networking, TCP/IP understanding</p></li><li><p>Strong analytical skills</p></li><li><p>1st/2nd shift flexibility</p></li><li><p>Strong written and verbal English communication skills</p></li><li><p>Advanced Threat Actors</p></li><li><p>Lateral Movement</p></li><li><p>Root causes &amp; Attack vectors</p></li><li><p>SIEM Platforms</p></li><li><p>SOAR Technologies</p></li><li><p>Scripting Languages (Python, PowerShell, etc.)</p></li></ul><p></p><p></p><p><b><span>PREFERRED QUALIFICATIONS</span></b></p><ul><li><p>Bachelor’s Degree</p></li><li><p>At least one Industry accepted security certification.</p></li><li><p>5+ years of total IT related experience</p></li><li><p>2+ years’ experience working in a <b>Security Operations Center</b></p></li></ul><p></p><p></p><p>The role offers a hybrid / flexible schedule, which means there's an in-office expectation of 3 or more days per week and the flexibility to work outside the office location for the other days.</p><p></p><p>This position is not eligible for visa sponsorship.</p><p></p><p></p><p><span>If there’s anything we can do to accommodate a disability during any portion of the application or hiring process, please refer to our </span><a href="https://careers.usbank.com/global/en/disability-accommodations-for-applicants" rel="noopener noreferrer" target="_blank">disability accommodations for applicants</a><span>. </span><