SOC Analyst III The Security Operations Center is responsible for providing 24/7, 365 monitoring, detection, and response capabilities for Comerica. This includes event, cloud security, and DLP monitoring, as well as a role in the incident response process. The Tier 3 SOC Analyst serves as an escalation point for Tier 1 and Tier 2 Analysts within the SOC and provides advanced analytical and investigation support for complex incidents to assist in containment and mitigation of threats. The Tier 3 Security Operation Center (SOC) Analyst is responsible for providing oversight during day-to-day operational tasks for Tier 1 and 2 analysts within the SOC, as well as advanced technical investigation capabilities to respond to security incidents. The analyst will serve as the escalation point for all SOC analysts, and as an interface with the Advanced Threat Hunt and Intelligence team for the SOC. Position Responsibilities Security Operations Center (SOC) Analysis Provides advanced technical investigation and forensics capabilities across malware, phishing, cloud access security brokers (CASB), network, and configuration compliance domains. Responds to and mitigates security incidents based on defined process and procedures to contain and eradicate threats. Resolves or escalates investigations to CSIRT as required, in coordination with the SOC Manager. Interfaces with the threat hunting and threat intelligence teams to build proactive searches / signatures in the SIEM or security application to enhance detection capabilities. Performs sampled reviews of investigated incidents by Tier 1/Tier 2 Analysts to improve ticket quality and provides feedback to coach junior Analysts. Documentation and Support Participates in the development / enhancement of process and technologies impacting the SOC and the broader Cyber Defense Operations function. Collaborates closely with the SOC Manager to develop recommendations and/or technical implementations to improve workflows within the SOC, including the use of automation and optimization of processes. Collaborates with other Engineering and Operations teams within Comerica to troubleshoot, respond, and improve detection capabilities. Handles sensitive information in accordance with the Corporate Information Protection Policy. Equal Opportunity Employer Minorities/Women/Protected Veterans/Disabled
Staff Engineer - Networks The Network Engineer is responsible for managing, designing, and improving Comerica’s enterprise network. He or she will assist network architects with design and implementation of network technologies. This role is responsible for providing guiding principles and leadership to engineering teams as well as offering proactive assistance on project-based activities. General duties include leading buildout of solutions and driving innovation for incorporating new modern technologies in the enterprise network. Partners with management and other engineers to drive infrastructure modernization projects to completion and provides Level3 technical support using extensive technical background to take on work assignments the team is engaged in. Strong people skills and the ability to balance/prioritize between multiple tasks and projects are essential. This position does involve both routing and switching as well as network firewall implementation projects for both on-prem and cloud infrastructure. The ideal candidate would have experience in network design, implementation, and documentation of medium-large scale enterprise networks, be familiar with datacenter technologies (Nexus switches, VPC, Nexus Dashboard, Cisco ACI), have experience with switching / routing / Wi-Fi and Firewall/VPN on Cisco platforms as well as RemoteAccessVPN/AnyConnect on Firepower/ASA clusters and tweaking their integration with NAC solutions (Cisco ISE). For maintaining and implementing a good security posture, skills with Checkpoint firewall technologies (Management Servers, CheckPoint Infinity, CheckPoint Maestro deployments) are also desirable. The principal engineer would also ideally work with F5 Load balancer clusters (Load balancing and SSL decryption policies) as well as Infoblox (DNS/IPAM functions). Cloud networking experience is also desirable (AWS, Azure, GCP) with existing familiarity with on-prem to cloud connectivity solutions (BGP peering, Cloud Exchange, etc.). SolarWinds use for compliance, configuration management and monitoring, LiveAction or LibreNMS monitoring is also desirable. CCNP Enterprise (R&S) knowledge level required, CCIE nice to have. The Staff Engineer is expected to work collaboratively across a variety of business units to implement new technologies, coordinate and take lead of assigned projects in all technical and communication aspects, Lead engineering peers towards achieving common goals in assigned projects, and coach peer engineers and effectively perform knowledge transfer/cross-training activities. The ability to take ownership of a project and execute it from 0 to 100% with little to no supervision, while interacting with multiple departments/teams that may hold certain keys to project completion is critical to achieving success in this role. Position Responsibilities: Design & Methodology Work closely with business units, application teams, infrastructure areas and vendors to identity, review and evaluate the solution requirements. Investigate and propose strategic fits for virtualization, consolidation and rationalization solution opportunities within the infrastructure or business. Propose changes to the technical design solutions as applicable. Evaluate and align strategic fit solutions across platforms and solutions specific to system hardware and software technologies. Understand, participate, review and influence long term capacity planning and technology investments. Technical Consulting Provide client consulting and planning guidance as applicable for moderate to complex projects. Provide consultation and works closely with other functional infrastructure areas/departments on multiple initiatives to meet common organizational/business goals and objectives. Participate in and provides consulting to project teams on architectural, design development, integration opportunities, planning of complex systems. Planning & Organizing Map requirements into standard services solution, identity opportunities for integrating to existing or reuse technology and provide cost effective solutions for moderate to large highly complex project/programs/initiatives. Review, identify and manage requirements for moderate to complex solutions and do a cost value, feasibility and risk analysis. Risk Management Review, participate, develop and update architectural standards, guiding principles, rationales and strategies. Evaluate, review and approve highly complex design solutions for business and Infrastructure project or programs or initiatives. Administration Keep management informed of status of on activities through accurate, timely, and appropriate reporting. Actively participate in committees representing the department and/or planning unit. Equal Opportunity Employer Minorities/Women/Protected Veterans/Disabled
