Lead, Business Analyst Identity Proofing MIAM Business Applications

Why USAA?

At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. We seek to be the #1 choice for the military community and their families.

Embrace a fulfilling career at USAA, where our core values – honesty, integrity, loyalty and service – define how we treat each other and our members. Be part of what truly makes us special and impactful.

The Opportunity

As a dedicated Lead, Business Analyst Identity Proofing MIAM Business Applications, you will be responsible for the operational excellence and security of all identity proofing platforms and tools. This role ensures the efficient and secure onboarding of members by monitoring platform performance, identifying and resolving issues, analyzing vendor performance, and implementing minor process improvements. The ideal candidate possesses in-depth knowledge of identity proofing technologies, KYC/AML regulations, and security standard methodologies.

Investigates, analyzes, and responds to security anomalies and events (e.g. suspicious behavior, attacks, and security breaches) within USAA’s environments using a variety of cyber defense tools to detect and respond to threats. Conducts vulnerability, security configuration, and/or penetration testing assessments of systems and networks. Identifies cyber threats, analyzes operational impacts, and communicates to appropriate collaborators. Stays ahead of with the latest information security threats, exploits, trends, and intelligence.

We offer a flexible work environment that requires an individual to be in the office 4 days per week. This position can be based in one of the following locations: San Antonio, TX, Plano, TX, Phoenix, AZ, Colorado Springs, CO, Charlotte, NC, Chesapeake, VA or Tampa, FL. Relocation assistance is available for this position.

What you'll do:

• Influences and leads efforts across the Information Security department and enterprise as a SME in their domain.

• Leads research efforts and analysis of the latest information security vulnerabilities, threats, exploits, trends and intelligence. Shares intelligence with the enterprise. Collaborates in the Intelligence community with external organizations.

• Serves as domain expert, leads, and improves the vulnerability management, security configuration assessment, and/or penetration testing programs.

• Develops analysts through training and knowledge sharing activities.

• Monitors internal and external networks, systems, and applications for advanced security anomalies and events (e.g. suspicious behavior attacks, and security breaches). Trains analysts in incident detection and response. Leads and improves the incident response program.

• Leads and responds to cyber incidents, performing detailed analysis using complex security tools to resolve root cause and impact by using a broad range of demonstrated experience (e.g. forensics, networking, servers, coding, etc.) to resolve a malicious actor's tactics, techniques, and procedures. Acts as leader for cyber incidents.

• May testify as expert witness in court.

• Incorporates discoveries from the incident response process to substantially improve the existing detection capabilities, operational processes, security controls, and overall program.

• Prepares and delivers written and verbal briefs with recommendations to senior leadership and external parties on the latest threats, alerts, incidents, and improvements.

• Drives and directs quality work efforts. Serves as the primary resource for multi-functional team members on intensified issues of a unique nature.

• Maintains experienced level knowledge of USAA Information Security standards as well as industry information security standard methodologies, frameworks, laws, and regulations.

• Ensures risks associated with business activities are effectively identified, measured, monitored, and controlled in accordance with risk and compliance policies and procedures.

What you have:

• Bachelor’s degree; OR 4 years of related experience (in addition to the minimum years of experience required) may be substituted in lieu of degree.

• 8 years of related experience in Information Security, Cybersecurity and/or Information Technology with a security focus to include accountability for complex tasks and/or projects.

• 6 years of related experience in one of the following domains: Security and Risk Management, Asset Security, Security Architecture and Engineering, Communications and Network Security, Identity and Access Management, Security Assessment and Testing, Security Operations, Software Development Security.

• <