Cyber Threat Detection and Response Analyst

Job Description:

Job Title Cyber Threat Detection and Response Analyst

Corporate Title No Corporate Title

Location Jacksonville, FL

Overview

Everyday Deutsche Bank observes thousands of intrusion attempts. Integrated in Deutsche Bank’s Chief Security Office (CSO), the Information Security Operations function is responsible for mitigating these risks. The Information Security Operations team enables the Business of Deutsche Bank by providing agile security operational capabilities. The teams: Cyber Threat Operations, Malware Analysis, Security Monitoring, Incident Response, Forensics and Vulnerability Management provides global services from key locations in Frankfurt, Jacksonville, and Singapore.

What We Offer You

• A diverse and inclusive environment that embraces change, innovation, and collaboration

• A hybrid working model, allowing for in-office / work from home flexibility, generous vacation, personal and volunteer days

• Employee Resource Groups support an inclusive workplace for everyone and promote community engagement

• Competitive compensation packages including health and wellbeing benefits, retirement savings plans, parental leave, and family building benefits

• Educational resources, matching gift, and volunteer programs

What You’ll Do

• Develop working relationships and liaise with business partners and subject matter experts across the Bank, as well as review and evaluate incoming Cyber Threat information for relevance to the Bank’s operational posture, based on established business and intelligence requirements

• Gather, contextualize, and convert threat information into actionable intelligence that can be easily consumed by appropriate group(s) within the Bank, while leveraging the Bank’s Security Incident and Event Management (SIEM) capabilities in order to assess Information Technology (IT) and security-based computer and network logs for the purpose of identifying specific patterns of activity or generating statistical summaries (i.e., analysis of known threats and proactive threat detection)

• Use established workflows to process threat information (i.e., identify, highlight, document, and mitigate Information security (IS) issues and risks.), in addition to developing and maintaining behavioral- and signature-based threat-driven use-cases, delivering results within given time frames, ensuring work is consistent, well documented, and in-line with team standards at all times, and identifying opportunities for and drive improvements of internal processes, procedures, and workflows

• Escalate unresolved issues in a timely manner and perform, on both a regular and ad-hoc basis, accurate IS reporting from a wide range of sources, using a wide range of internally-develop and commercial tools

• Support the execution of the Information Security Operations (ISO) initiatives and mandate, in line with the defined organizational strategic approach and demonstrate personal commitment to the Bank’s values

• Adhere to Bank policies and procedures and drive compliance within the team, while taking ownership for personal career development and management, seeking opportunities to develop personal capability and improve performance contribution

Skills You’ll Need

• Experience in at least one or more of the following Information Security functions: Identity and Access Management, Information Security Incident and Problem Management, Information Security Governance for business and technology, or Vulnerability Management

• Experience in evaluating, assessing, and contextualizing device and network vulnerabilities

• Experience working with external Threat Intelligence (TI) vendors, Splunk or other database query languages (i.e. Structured Query Language SQL), basic data and network analysis tools (i.e. Wireshark), and working with a multi-cultural and global staff

• Ability to research and characterize security threats to include identification and classification of threat indicators

Skills That Will Help You Excel

• Degree from a four-year university or major course work in computer science, networking, engineering, or other computer-related field of study

• The following education/certification attainment will be beneficial to the candidate; CASP (CompTIA Advanced Security Practitioner). CAP (Certified Authorization Professional PRF Role Competencies

• Investigative and analytical problem-solving skills with critical thinking and contextual analysis abilities

• Ability to communicate professionally and efficiently both verbally and in writing while being self-motivated with ability to work with minimal supervision

• Prove