Cyber Security Analyst III/Senior

Company

Federal Reserve Bank of Cleveland

The Federal Reserve Bank of Cleveland’s mission is to foster the stability, integrity, and efficiency of the nation’s monetary, financial, and payment systems while representing the Fourth District perspectives.

As part of the nation’s central bank, we are a team of mission-driven professionals who are committed to serving with excellence. Our core values are: Build Trust Every Day, Own Our Actions, Collaborate with Intention, and Be Open to Change.

For twenty-six years in a row, we’ve been named “One of Northeast Ohio’s Best Places to Work” by North Coast 99. This prestigious award honors organizations with outstanding employment practices, including compensation, benefits, training, recruitment, retention, community services, and employee communications.

Follow us on LinkedIn, Twitter, Instagram, and our YouTube channel – Cleveland Fed

The selected candidate will support the Cybersecurity Analytics Support Team (CAST) function by actively working with CAST personnel, supervisory staff and Board of Governors’ staff concerning ongoing cyber incidents within supervised institutions as well as emerging threats potentially impacting the United States financial sector. This individual would have experience and/or expertise in multiple cybersecurity subject matter areas:
 

• Cybersecurity related frameworks such as NIST 800-53, NIST Cybersecurity Framework (CSF), IS 27001, MITRE ATT&CK, etc.
• Assessing cybersecurity threats, vulnerabilities, and related exploitation activity; recommending related mitigations to manage risk to computing environments.
• Tracking and reporting on threat actor groups that potentially pose a threat to the United States financial sector.
• Cloud services and providers such as Amazon Web Services, Microsoft Azure, and Google Cloud Platform.
• Incident management and response activities related to cybersecurity events.
• Security architecture and design implementation to mitigate threats against confidentiality, integrity, and availability.
   

This position requires access to confidential supervisory information and/or FOMC information, which is limited to "Protected Individuals" as defined in the U.S. federal immigration law. Protected Individuals include, but are not limited to, U.S. citizens, U.S. nationals, and U.S. permanent residents who either are not yet eligible to apply for naturalization or who have applied for naturalization within the requisite timeframe. Candidates who are not U.S. citizens or U.S. permanent residents may be eligible for the information access required for this position and sponsorship for a work visa, and subsequently for permanent residence, if they sign a declaration of intent to become a U.S. citizen and meet other eligibility requirements.

In addition, all candidates must undergo an enhanced background check and comply with all applicable information handling rules, and all non-U.S. citizens must sign a declaration of intent to become a U.S. citizen and pursue a path to citizenship

Essential Accountabilities

• Conducts analysis and interpreting of cybersecurity threats to identify trends and emerging risks.
• Provide input and insight into response activities during cyber incidents to include best practices from regulatory bodies, cybersecurity organizations, and NIST.
• Conducts formal assessments to determine the severity of reported cybersecurity incidents at financial institutions.
• Prepares in written form research, analysis, and assessments for key internal stakeholders as needed or requested. Analysis supports recommendations regarding cybersecurity threats, threat vectors, threat actors and threat trends.
• Demonstrates knowledge of cybersecurity threats within the broader financial sector and related industries.
• Assist bank supervision examination teams, the central point of contact teams, and examiners-in-charge during active cybersecurity incidents at regulated banking/financial institutions.
• Build and maintain relationships with central points of contact teams, examiners, and board staff across the Federal Reserve System.
• Communicate appropriate information to the Supervision & Regulation staff at the Federal Reserve Bank and Board levels to maintain a comprehensive understanding of ongoing incidents and ensure appropriate steps are taken to isolate any potential residual effects from a cyber incident.
• Participates in knowledge sharing forums related to key cybersecurity risks and emerging issues.
• Participates in efforts to advance Reserve Bank or System strategic initiatives.
• Provides leadership, coaching, and mentoring for less experienced analysts on processes and procedures related to internal matters and th