As the Principal Cyber Defense Ops Spec, you will be responsible for performing security monitoring, intrusion analysis, incident handling, data loss prevention, privileged user monitoring, security incident management, malware detection/eradication, and recognizing hacker/incident response tactics, techniques, and procedures. This role is for a senior level individual contributor role on the Cyber Defense Threat Detection (CDTD) team reporting to the Mgr. Cyber Defense Ops and you will be working closely with all the CDTD, Security Intelligence, Content Engineering, and Attack Surface Management teams as well as other internal Citizens teams. You will have responsibility for one or more of the security systems aligned with their specific function, either directly or indirectly; and will be a technical authority for critical operational decisions having significant impact to the organization with authority extending beyond the team to include both technology and business line areas in security related decisions. This role requires you to stay current with security technology, the threat landscape, and emerging threats, and you will act as a subject matter expert in their specific disciplines and will provide mentorships, act as an escalation point to other analysts and advise management with recommendations and guidance as needed.
Primary responsibilities include
- Assist in providing direction for Cyber Defense teams, to include mentoring and collaborating on building security operations functions that span the CS&R portfolio of security controls.
- Review technologies/services and make recommendations on use, while continuing to focus on business enablement.
- Recommend and implement continuous improvements to security services and applications.
- Responsible for providing recommendations for effectively implementing technical layers of monitoring defense using a risk based approach.
- Developing meaningful metrics to reflect the true posture of the environment allowing the organization to make educated decisions based on risk.
- Representing Cyber Defense as needed on security related or risk related initiatives or working groups where technical skills and security expertise are required.
- Proactively protecting, monitoring, investigating and resolving threats to secure user environment and company assets.
Qualifications, Education, Certifications and/or Other Professional Credentials
- Required Qualifications
- Enter text here
- Add or delete bullets, as applicable
- Preferred Qualifications
- Enter text here
- Add or delete bullets, as applicable
Hours & Work Schedule
- Hours per Week:
- Work Schedule:
Equal Employment Opportunity
Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression, genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague’s or a dependent’s reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws. At Citizens, we are committed to fostering an inclusive culture that enables all colleagues to bring their best selves to work every day and everyone is expected to be treated with respect and professionalism. Employment decisions are based solely on merit, qualifications, performance and capability.
Equal Employment and Opportunity Employer
Job Applicant Data Privacy Policy
Background Check
Any offer of employment is conditioned upon the candidate successfully passing a background check, which may include initial credit, motor vehicle record, public record, prior employment verification, and criminal background checks. Results of the background check are individually reviewed based upon legal requirements imposed by our regulators and with consideration of the nature and gravity of the background history and the job offered. Any offer of employment will include further information.
Skills Required
- Experience with security monitoring and intrusion analysis
- Incident handling and security incident management experience
- Data Loss Prevention (DLP) and privileged user monitoring experience
- Malware detection and eradication expertise
- Knowledge of attacker tactics, techniques, and procedures (TTPs)
- Ability to act as technical authority and escalation point
- Experience mentoring and providing guidance to other analysts
- Ability to develop meaningful security metrics and recommend continuous improvements
Citizens Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Citizens and has not been reviewed or approved by Citizens.
-
Healthcare Strength — Healthcare coverage is positioned as comprehensive, with multiple plan options and preventive care highlighted as fully covered. Mental-health support is also emphasized through EAP-style counseling access and app-based support.
-
Retirement Support — Retirement benefits are described as meaningful, including an employer match and additional company contributions in some descriptions. Stock purchase features and occasional profit-sharing framing add to the overall retirement-and-wealth picture.
-
Leave & Time Off Breadth — Time-off benefits are described as generous, including a substantial PTO bank, paid holidays, and sizeable parental leave. Adoption assistance and emergency backup care are also presented as part of the leave-related support set.
Citizens Insights
What We Do
As one of the oldest and largest financial services firms in the United States with a history dating back to 1828, we’re committed to providing solutions and expertise that support our customers, clients, colleagues, and communities in what’s next on their own unique journey. We invest in the humans who build the logic, ideas, and innovations that bring new technologies to life. Investments in AI, cloud computing, machine learning and automation provide our engineers the tools that enable us to remain competitive and win in today’s environment. At Citizens, we recognize that the journey to accomplishment is no longer linear and that individuals are made of all they have done and all they are going to do. Whether you’re considering banking with us or looking to work with us, you’ll find a customer-centric culture and a supportive, collaborative workforce at Citizens. You’re made ready and so are we. If you're ready to advance your career in technology and security, learn more about opportunity's Citizens offers here: https://jobs.citizensbank.com/digital-transformation
Why Work With Us
We empower the colleagues that power our tech. With growth & upskilling opportunities and sought-after benefits, plus a diverse culture of people and perspectives, we help our colleagues achieve career goals. Because innovation can’t happen without the minds and hearts of our people. Technology is constantly evolving, and we believe you can too.
Gallery







