Cybersecurity Analyst

WHAT YOU WILL DO EVERYDAY

Monitors cybersecurity system operations to protect the credit union's networks and systems. Uses cybersecurity tools to monitor and proactively search for threats to systems or networks; and focuses on the confidentiality, integrity and availability of data. 

 

Conducts network\system defense analysis and provides recommendations for improvements. Develops and maintains thorough, up-to-date knowledge of cybersecurity threats and incident response best practices. Collaborates with peers and stakeholders to establish and ensure consistent response practices and prioritize security events. Acts as a resource for on-going information security audits and assessments.

 

Works independently with general supervision; exercises judgment within defined guidelines and practices to determine appropriate action.

 

Direct Reports: None

 

HOW YOU WILL MAKE AN IMPACT

30%         Monitor the Security Information and Event Management (SIEM) and MDR systems. Ensure systems are always operating with current and complete configuration information, are collecting and analyzing security data, and generating regular reports and security alerts. Take prompt action on alerts, performing initial threat hunting, so that anomalies and abnormal behavior can be investigated.

25%         Monitor the Vulnerability Management system to ensure the discovery, management, and remediation of vulnerable assets in the enterprise. Communicate vulnerability findings with the owners of assets or applications for remediation and provide guidance on criticality and remediation efforts. Assist with implementation of approved remediation steps on applicable systems.

15%         Monitor vulnerability bulletins and industry publications to stay informed of high priority breaches and patches that affect credit union systems.

15%         Assist with monitoring and enforcement of system hardening efforts.

15%         Assist with analysis and completion of cybersecurity audits, assessments and vendor due diligence processes.

--              Must comply with all company policies and procedures, applicable laws and regulations, including but not limited to, the Bank Secrecy Act, the USA PATRIOT Act, the Office of Foreign Assets Control, AML/CIP, Consumer Privacy, Regulation CC, Information Security, Bank Protection Act, FACT-Identity Theft, Information Technology and GLBA.

 

WHAT YOU WILL NEED TO SUCCEED

Experience

5+ years experience including:

Email security protocols including DKIM, DMARC, and SPF

Enterprise class email security appliances/gateway

Modern Microsoft Windows Server Versions

Microsoft Active Directory

Mobile Device Management (MDM) platform

Microsoft Entra ID/Purview

Scripting knowledge using PowerShell or related scripting language

Mail and Web filtering and secure delivery

MDR

Strong Communication and coordination skills with internal departments and third party vendors

Detailed Documentation

Internal and external information and cybersecurity assessments and audits "

 

Education / Certifications / Licenses

High school diploma

CompTIA Security+ or similar preferred

 

PREFERRED SKILLS

-   Ability to perform and deliver under pressure.

-   Ability to work with and participate in a high performing team.

-   Professional level of verbal and written communication skills are essential to the position.

-   Proficiency in Microsoft Office (Outlook, Word, Excel, PowerPoint).

-   Demonstrated knowledge of Credit Union regulations, products, policies, procedures, and services.

-   Advanced analytical skills for a variety of tasks or projects.

-   Ability to drive oneself to take initiative and action to pursue goals and complete tasks.

-   Ability to deal with complex problems involving multiple facets, variables and situations.