Cybersecurity Analyst

Redwood Credit Union is seeking a Cybersecurity Analyst, who will play a crucial role in safeguarding Redwood Credit Union’s critical information resources. Collaborate with architects, engineers, developers, the internal audit department, as well as various lines of business and management to design and implement security policies, practices, technologies, and tools. Develop and maintain efficient and effective security controls in a dynamic technology environment. Champion information security awareness across company, engaging team members to continuously enhance security posture to meet industry best practices as well as internal, Member, and regulatory requirements.   Key Responsibilities Security Analysis & Incident Response: o Conduct in-depth security analysis, including vulnerability assessments, threat modeling, risk assessments, and alert management.
o Establish standards and evaluation criteria for SIEM log analysis on logs and detections; write detection rules using KQL.
o Manage cybersecurity ticket queue, setting triage priorities and defining escalation thresholds to ensure alignment with organizational risk appetite.
o Investigate and respond to security events promptly, during event investigations, containment, resolution and escalation.
o Collaborate with cross-functional teams to analyze and mitigate security threats.
o Develop recommendations to prevent future incidents based on forensic analysis.
o Monitor and interpret emerging threat trends to stay informed and advise management to address evolving risks.
o Make recommendations to management to reduce risk profile of systems and processes. Security Controls & Framework: o Design, implement, and monitor security controls across systems and applications.
o Strengthen the security framework to align with industry standards (CIS / NIST).
o Advise and contribute to security-related aspects of internal audits and regulatory compliance. Other Functions: o Partner with IT staff on security best practices and emerging technologies.
o Participate in continuous learning to stay current with cybersecurity advancements.
o Collaborate with colleagues to draft technology plans that enhance security posture.
o Participate in community events, volunteer boards and associations.   Join us and discover why you'll love working at Redwood Credit Union!   ABOUT REDWOOD CREDIT UNION (RCU): At Redwood Credit Union, our mission is to passionately serve the best interests of our Members and communities. Since 1950, we have been dedicated to supporting the financial well-being of our Members through better rates, low or no fees, and best-in-class customer service. Our purpose is to inspire hope and elevate the financial well-being of our communities one person at a time, through good times and bad.   As a not-for-profit financial institution, we are committed to a people-first approach, which is reflected not only in how we serve our Members, but also in how we treat our employees. Our leadership team is deeply focused on fostering a culture of heart and empathy, integrity, passion, inclusion, meaningful relationships, excellence, and ensuring financial well-being for all.    Why work for Redwood Credit Union? •  27th largest credit union in the U.S. and the largest financial institution based in the North Bay •   Awarded a 5-Star Rating based on 6/30/24 financial data by Bauer Financial •  Recognized by Newsweek as one of "America's Greatest Midsize Workplaces 2025" •   Recognized by Newsweek as one of "America's Best Credit Unions 2026" •   Top Corporate Philanthropists (#24) - San Francisco Business Times •   Voted Best Places to Work in the North Bay 20 years in a row •   World-class Employee Engagement scores •   Rated Superior in Service by more than 90% of Members, surveyed by SF Gate •   Industry leading Net Promoter Scores across the U.S.                                                      

Minimum Qualification: Knowledge, Skills and Abilities

• O365, EDR/XDR platform experience (Crowdstrike, Palo Alto or MS Defender) and Azure administration experience required.
• Experience with Microsoft Sentinel.
• Experience with managing network devices like firewalls, VPN appliances, remote access & servers.
• Intermediate experience with managing Microsoft and Linux servers, endpoints across Mac and Windows, and MDM solutions like Intune.
• Thorough knowledge of processes, procedures, rules, and regulations pertaining to information technology security.
• Ability to work independently with little supervision and/or direction.
• Ability to develop and implement technology projects.
• Ability to interact