Cybersecurity Specialist

Description

The Cybersecurity Specialist will provide oversight to ensure our network, hardware, software and related components are protected against cyber-attacks as well as internal threats. This individual will be responsible for providing specific security reports in various areas and aspects of the security posture on a regular basis. This position will be a primary contact with the credit union’s Security Service Providers, and work closely with the Systems, Core, and Network teams to ensure the appropriate security measure are in place. This position will have input on the development of the overall security strategy and policies.

The Cybersecurity Specialist is expected to interface with peers in within IT as well as with the leaders of the business units to solicit their involvement in achieving higher levels of enterprise security through information sharing and co-operation. Candidates should have strong IT skills and a deep understanding of cyber-security threats. Specifically, this position will have the following duties and responsibilities:

• Assist with the enforcement of policies, procedures, and associated plans for system security administration and user system access based on industry-standard best practices;
• Provide educational resources and training related to the cybersecurity landscape to peers and business leaders;
• Oversee the operations of the enterprise’s security solutions;
• Providing the AVP with recommendations on security modifications, updates or new solutions and lead security related projects and provide critical inputs on significant organizational initiatives;
• Research best practices and which ones will work best with the credit union’s infrastructure to provide the best security company-wide;
• Work with the System Administration team to help ensure servers vulnerabilities are identified and mitigated;
• Monitor all of the credit union’s security systems to quickly identify and research any suspicious or known malicious activity;
• Research all tickets and events reported by the security service providers, closing the tickets and events in an expeditious manner;
• Identify, as best possible, cyber attackers so the appropriate defensive measures can be added or updated;
• Work with all of the credit union’s security partners to research events and mitigate threats as they are identified or occur;
• When necessary, draft formal reports for review by the SVP--ITO for submission to authorities after an incident;
• Lead in identifying, prioritizing, and coordinating the protection of critical security services, architecture, supporting infrastructure and cloud resources.
• Perform system administration or guidance on specialized cyber defense applications and systems utilizing best practice hardening techniques to protect the organization’s digital ecosystem.
• Provide guidance and coordinate with Cybersecurity team to manage and administer the updating of rules and signatures; including but not limited to IDS/IPS, Firewalls, SIEM, EDR, PKI, web, related operating systems and supporting software. 
• Read, interpret, write, modify, and execute simple scripts (e.g., Powershell, Python, SQL) on cyber defense applications and systems (e.g., those that perform tasks such as: parsing large data files, automating manual tasks, and fetching/processing remote data).
• Leverage vulnerability database sources to understand each weakness, its probability and remediation options, including vendor-supplied fixes and workarounds.
• Conduct continuous discovery and vulnerability assessment of enterprise-wide assets and provide in-depth analysis of vulnerabilities to other team members to assist with overall vulnerability remediation efforts.
• Understand the technical objectives of an adversary, model threats, and document how vulnerabilities are leveraged using OWASP, CVSS, and the MITRE ATT&CK framework to assess risk and implement/validate controls as necessary.
• Identify and respond to potential security events and triage requests through the team mailbox or ticketing system. 
• Participate and provide support to business units launching new technology applications or services to verify that products offerings are not at risk of misconfiguration, compromise, or information leakage. 
• Ensure cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level.
• Liaise with the security vendors to improve tool usage and workflow, as well as mature monitoring and response capabilities.
• Assist the SVP-ITO in the development of annual board of director security training
• Keep the SVP-ITO informed of the security posture of the credit union through regular reports;
• Help lead and participate in project planning for business initiatives and