Information Security Analyst II

First Citizens Bank - Raleigh, NC

Full-time

Hybrid - Raleigh, NC

Credit Intermediation and Related Activities

About the position

This position supports the Information Security Vulnerability Management's Application Security program within the Bank at an advanced level of ability. We are looking for Analysts who have an extensive background in Application Security including experience in DAST/SAST, SCA, and pipeline integration. This analyst should be able to present to leadership on findings and describe the identified risk. The role involves working directly with Application Security tools and integrations, assisting in maturing the Application Security program by implementing new initiatives and expanding the existing scope. The analyst will collaborate with application teams to appropriately disposition findings, leveraging their experience and knowledge to identify false positives from valid findings, defending valid findings when necessary, and providing remediation guidance. Additionally, the analyst will be responsible for preparing reporting and metrics for Application Security, participating in Daily Cyber Ops standup calls, maintaining process documentation, supporting audits and exams, and staying current with vulnerability information across all products in the environment. This position is remote eligible, allowing for flexibility in work arrangements.

Responsibilities

• Working directly in Application Security tools and integrations with these tools
• Assist in maturing the Application Security program; implementing new initiatives and expanding existing scope
• Work with application teams to appropriately disposition findings; identifying false positives from valid findings, defending valid findings when necessary, providing remediation guidance
• Preparing reporting and metrics for Application Security
• Participate in Daily Cyber Ops standup calls
• Maintaining process documentation
• Supporting audits and exams
• Stay current with vulnerability information across all products in the environment

Requirements

• Bachelor's Degree and 4 years of experience in Information security OR High School Diploma or GED and 8 years of experience in Information security
• Active listening and assimilation of information skills
• Ability to travel as needed

Benefits

• Comprehensive benefits program designed to meet associates' needs
• Customized offerings including those designed to support families