Cyber Threat Intelligence Analyst I

BankUnited is seeking a Cyber Threat Intelligence Analyst I to support its Cyber Threat Unit. The role focuses on assessing cyber risk, analyzing threats and security events, responding to incidents, conducting digital forensics, and implementing controls to prevent malicious cyber activity.

What you'll do:

• Monitor and analyze network traffic, Intrusion Detection/Prevention Systems (IDS/IPS), Data Loss Prevention (DLP) events, security events and logs
• Perform secondary reviews and maintain Data Loss Prevention (DLP) systems and policies
• Understand a variety of security and compliance policies and incident response processes
• Review daily reports and files to ensure compliance to policies and standards
• Escalate non-compliance issues to the appropriate group and follow-up on remediation actions
• Work with internal customers to respond to escalations
• Prioritize and differentiate between potential intrusion attempts and false alarms
• Determine if security events monitored should be escalated to incidents and follow all applicable incident response and reporting processes and procedures
• Create and track security investigations to resolution
• Open and assign tickets to the correct resolver, and validate/close tickets related to false positives
• Provide investigation, triage, and mitigation of detected security events
• Compose security alert notifications and other communications

What they're looking for:

• Bachelor's Degree in Computer Science, Information Assurance, Cyber Security or related field or equivalent combination of work with certifications is required
• An understanding of network and host based DLP technologies, processes, policies and procedures
• Basic understanding of regulatory compliance initiatives related to Sarbanes Oxley (SOX), and the Gramm–Leach–Bliley Act (GLBA)
• Experience in cloud security, or cloud administration
• Experience with cloud security tools and technologies, such as AWS Security Hub, Azure Security Center, GCP Security Command Center, etc
• Experience with scripting languages
• Familiarization of cyber and cloud security standards, frameworks, and guidelines such as NIST, PCI-DSS, MITRE, OWASP, etc
• Ability to organize and analyze large amounts of data and report findings
• Firm grasp of the design and implementation of effective IS controls
• Proficiency with a Security Incident handling tool (ie SIEM, ESEM)
• Experience with Security orchestration Automation Response (SOAR)
• Working knowledge of monitoring tools