Cybersecurity Threat Principal Analyst - Hybrid_

Charlotte

**The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.**

Need Help? (rainshark.com/bbandt/careers-site-faq)

_If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility ([email protected]?subject=Accommodation%20request)_

_(accommodation requests only; other inquiries won't receive a response)._

**Regular or Temporary:**

Regular

**Language Fluency:** English (Required)

**Work Shift:**

1st shift (United States of America)

**Please review the following job description:**

Build and execute Cyber Threat Intelligence workflows to coordinate and collaborate with teams responsible for Threat Management. Analyze and communicate external threat information using threat profiles, and Mitre Att&ck framework. Responsible for tracking of disposition of intelligence that guides the deployment of countermeasures, remediations, hunts, and continuous tuning of policies and security controls. Expected to provide written and verbal updates, consume and produce tactical threat intelligence, consume and produce metrics that support Cyber Defense decisions.

**Essential Duties and Responsibilities**

Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

1. Build and maintain threat profile library based on accepted intelligence requirements, threat models, and available Cyber Defense controls

2. Track how threat intelligence is applied by teams responsible for each domain of Cyber Defense to reduce risk

3. Build and execute workflows that enable Threat Management

4. Participate in a rotation to conduct stakeholder briefings, gather feedback and new requirements for continuous improvement

5. Collaborate on intelligence team products and respond to stakeholder RFIs

**Qualifications**

**Required Qualifications:**

The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

1. Bachelor’s degree in Computer Science or related field or equivalent education and related training

2. 8 years of experience in Cybersecurity or related work

3. Broad knowledge of general IT with mastery of one or more of the following areas: operating systems, networking, computer programing, web development or database administration

4. Demonstrated advanced knowledge of cyber security operations with mastery of one or more of the following: attack surface management, Security Operations Center (SOC) operations, Intrusion Detection/Intrusion Prevention Systems (IDS/IPS), Security Information and Event Management (SIEM) use, threats (including Advanced Persistent Threat (APT), insider), vulnerabilities, and exploits; incident response, investigations and remediation

5. Experience with systems for automated threat intelligence sharing using industry standard protocols, such as Structured Threat Information Expression (STIX) and Trusted Automated Exchange of Indication Information (TAXII) Advanced knowledge of processes, procedures and methods to research, analyze and disseminate threat intelligence information

6. Ability to lead and persuade individuals and large teams on ideas, concepts and opportunities

**Preferred Qualifications:**

1. 3 to 5 years of experience in mid-level Cyber Operations role at a US critical infrastructure and/or regulated private entity (Threat intelligence, offensive security, threat hunting, threat intelligence, etc.)

2. Industry certifications in cybersecurity, such as Certified Information Systems Security Professional (CISSP), GIAC Certified Intrusion Analyst (GCIA), GIAC Cyber Threat Intelligence (GCTI), and other related credentials

3. Information Technology certifications and/or experience with development or operations

4. Demonstrated experience with self-management of project deliverables to multiple stakeholders, collaborating with offensive security, threat detection, threat response and other operational security teams.

**General Description of Available Benefits for Eligible Employees of Truist Financial Corporation:** All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist’s generous benefit plans, please visit our Benefits site (ruist.com/)

. Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.

**_Truist supports a diverse workforce and is an Equal Opportunity Employer that does not discriminate against individuals on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status or other classification protected by law. Truist is a Drug Free Workplace._**

EEO is the Law (eoc.gov/sites/default/files/2022-10/EEOC\_KnowYourRights\_screen\_reader\_10\_20.pdf)

Pay Transparency Nondiscrimination Provision (ol.gov/sites/dolgov/files/OFCCP/pdf/pay-transp\_%20English\_formattedESQA508c.pdf)

E-Verify (scis.gov/web/media/resourcesContents/E-Verify\_Participation\_Poster\_ES.pdf)