Senior Information Security Operations Analyst - Threat & SIRT

Job Description

First American Bank was founded in Chicago, and over the years has expanded throughout Wisconsin and Florida. As the largest privately held bank in Illinois, we now have over 60 locations and assets of $5+ billion. We are a community bank at heart with international expertise, traditional values, and a forward-looking philosophy. Our employees have the experience and vision to meet the needs of savers, borrowers, and businesses in the 21st century. First American Bank can offer employees a level of visibility, career growth, and stability that is difficult to find in many larger corporations.

 

The Senior Information Security Operations Analyst oversees Security Operations to ensure sensitive data is kept confidential and the Bank has the proper system and processes to protect and prevent threats from being carried out. This individual is expected to have outstanding problem-solving skills, meticulous attention to detail, and a sound understanding of cybersecurity and the financial sector requirements.

 

Duties & Responsibilities

• Oversee Security Operations work carried out cross functionally by first line control owners.
• Analyzes a variety of network and host-based security logs (Firewalls, NIDS, HIDS, Syslog) and guide remediation of gaps.
• Administers, monitors, and guides troubleshooting antivirus activities, and email gateway issues.
• Assists with security-related software and firmware (e.g., endpoint, vulnerability scanners, firewalls, IPS/IDS, DNS, proxy) to maintain security and service continuity.
• Assist with the resolution of security-related infrastructure.
• Participate in security incident response through in-depth, technical (log, forensic, malware, packet) analysis.
• Provide oversight of security alert detection and analysis capabilities across multiple technologies to ensure that security incidents are identified in a timely manner.
• Escalate and support potential security incidents in line with appropriate processes.
• Support communications of potential security incidents via multiple channels.
• Participate in the response to potential security incidents by identifying and communicating relevant supplementary information.
• Identify and analyze new and emerging threats to determine impacts to the Bank and provide guidelines and recommendations pertaining to opportunities to strengthen the Bank’s security landscape across the defense layers.
• Process Information Security due diligence requests and ensure compliance to policies, procedures, and regulations both internally and for third parties.
• Evaluate and recommend improvements to the company’s information systems control environment, risk management and Information Security audit processes to reduce duplicate audit requests in addition to minimizing Process Owner dependency to obtain control evidence.
• Create and maintain dynamic dashboards and/or scorecard for visibility of Information Security Governance activities.
• Provide security recommendations to other team members, management, and business stakeholders for solutions, enhancements to existing systems, and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
• Maintain up-to-date detailed knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors.
• Assess system configurations of company solutions as per the established baselines, for those security systems solutions that are partially or wholly operated by the InfoSec team.
• Identify security requirements, based upon need or as the result of a security issue that puts organizations systems at risk.
• Participate in the monitoring all in-place security solutions for efficient and appropriate operations.
• Aid in the design and execution of vulnerability assessments, penetration tests and security audits.
• Participate in the identification of security breaches detected by security systems, and in the tracking, investigation, and resolution of these incidents.
• Performs other related duties as assigned by management.

Qualifications

• A degree in Information Technology/Computer Information Systems or related field is required.
• SANS, IA, GIAC, SSL, DHCP, DNS, SSCP, CISSP, CISA, CISM, CEH, Security+ and / or similar certifications is a plus.
• Minimum eight years of experience supporting Information Security Operations, Threat Intelligence, and Security Incident Response.
• Expert in detecting policy violations or security incidents using log management platforms and SIEM.
• Expert in working with threat prevention and intrusion detection systems.
• Well