Cyber Security Engineer II

Summary

First Citizens Bank is seeking a Cyber Security Engineer II to help protect the Bank’s technological and digital security. The role mitigates cyber threats, assesses vulnerabilities, administers security tools and processes, investigates incidents, and develops risk mitigation solutions while providing technical guidance to less experienced associates.

Responsibilities

• Technical Security - Administers tools or processes that secure assigned technical areas and data. Participates in security audits, identifies security gaps, and develops and implements risk mitigation solutions
• Analysis - Identifies and evaluates identify potential threats or vulnerabilities in the Bank’s networks, applications, or systems. Compiles data from external or internal sources. Creates actionable intelligence based on review of analysis
• Security Expertise - Maintains a current knowledge of technology, emerging threats, and security trends within the assigned technical area. Provides guidance on appropriate security protocols. Participates in special projects as a technical and security resource. May assist with training on trends, threats, and applicable technologies
• Issue Resolution - Investigates and resolves security incidents which may include unauthorized access, malware infections, configuration anomalies, cyber attacks, and other risks. Escalates as appropriate
• Business Planning - May assist in in the development of security policies, standards, and strategies

Skills

• Knowledge of data security practices, procedures. monitoring and alert tools, and risk management standards
• Knowledge of Active Directory administration and user provisioning, Domain Name System, Group Policy Objects, New Technology File System permissions, File Shares, SharePoint, and Domain controllers
• Knowledge of Identity and Access Management concepts and technologies
• Ability to clearly communicate risks, threats, and vulnerabilities identified during assessments
• Availability to provide after-hours operational support on a rotational basis, with minimal travel
• Bachelor's Degree and 4 years' experience OR High School Diploma or GED/Equivalent and 8 years' experience in Systems Engineering, Network, or Information Security
• • 3-4 years of proven experience as an IAM Engineer or in a related position
• • Proficient in SailPoint IdentityIQ installation, configuration, and administration
• • Strong understanding of IAM concepts, including identity lifecycle management, role-based access control (RBAC), and least privilege principles
• • Familiarity with directory services (e.g., Active Directory, LDAP)
• • Experience with scripting (JavaScript, PowerShell) and SQL queries

Qualifications

Must Haves

• Knowledge of data security practices, procedures. monitoring and alert tools, and risk management standards
• Knowledge of Active Directory administration and user provisioning, Domain Name System, Group Policy Objects, New Technology File System permissions, File Shares, SharePoint, and Domain controllers
• Knowledge of Identity and Access Management concepts and technologies
• Ability to clearly communicate risks, threats, and vulnerabilities identified during assessments
• Availability to provide after-hours operational support on a rotational basis, with minimal travel
• Bachelor's Degree and 4 years' experience OR High School Diploma or GED/Equivalent and 8 years' experience in Systems Engineering, Network, or Information Security
• • 3-4 years of proven experience as an IAM Engineer or in a related position
• • Proficient in SailPoint IdentityIQ installation, configuration, and administration
• • Strong understanding of IAM concepts, including identity lifecycle management, role-based access control (RBAC), and least privilege principles
• • Familiarity with directory services (e.g., Active Directory, LDAP)
• • Experience with scripting (JavaScript, PowerShell) and SQL queries