Lead, Business Analyst Authentication MIAM Business Applications

Why USAA?

At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. We seek to be the #1 choice for the military community and their families.

Embrace a fulfilling career at USAA, where our core values – honesty, integrity, loyalty and service – define how we treat each other and our members. Be part of what truly makes us special and impactful.

The Opportunity

As a dedicated Lead, Business Analyst Authentication MIAM Business Applications, you will be responsible for the day-to-day operational health, performance, and security of all authentication platforms and applications within the organization. This critical role ensures seamless member experiences by monitoring system performance, identifying and resolving issues, handling vendor relationships, and driving minor improvements and updates. The ideal candidate possesses deep expertise in authentication technologies and processes and a solid understanding of security standard methodologies. Monitor the performance and availability of all authentication platforms and applications, proactively identifying and resolving issues impacting member experience.

Investigates, analyzes, and responds to security anomalies and events (e.g. suspicious behavior, attacks, and security breaches) within USAA’s environments using a variety of cyber defense tools to detect and respond to threats. Conducts vulnerability, security configuration, and/or penetration testing assessments of systems and networks. Identifies cyber threats, analyzes operational impacts, and communicates to appropriate collaborators. Stays ahead of with the latest information security threats, exploits, trends, and intelligence.

We offer a flexible work environment that requires an individual to be in the office 4 days per week. This position can be based in one of the following locations: San Antonio, TX, Plano, TX, Phoenix, AZ, Colorado Springs, CO, Charlotte, NC, Chesapeake, VA or Tampa, FL. Relocation assistance is available for this position.

What you'll do:

• Influences and leads efforts across the Information Security department and enterprise as a SME in their domain.

• Leads research efforts and analysis of the latest information security vulnerabilities, threats, exploits, trends and intelligence. Shares intelligence with the enterprise. Collaborates in the Intelligence community with external organizations.

• Serves as domain expert, leads, and improves the vulnerability management, security configuration assessment, and/or penetration testing programs.

• Develops analysts through training and knowledge sharing activities.

• Monitors internal and external networks, systems, and applications for advanced security anomalies and events (e.g. suspicious behavior attacks, and security breaches). Trains analysts in incident detection and response. Leads and improves the incident response program.

• Leads and responds to cyber incidents, performing detailed analysis using complex security tools to resolve root cause and impact by using a broad range of demonstrated experience (e.g. forensics, networking, servers, coding, etc.) to resolve a malicious actor's tactics, techniques, and procedures. Acts as leader for cyber incidents.

• May testify as expert witness in court.

• Incorporates discoveries from the incident response process to substantially improve the existing detection capabilities, operational processes, security controls, and overall program.

• Prepares and delivers written and verbal briefs with recommendations to senior leadership and external parties on the latest threats, alerts, incidents, and improvements.

• Drives and directs quality work efforts. Serves as the primary resource for multi-functional team members on intensified issues of a unique nature.

• Maintains experienced level knowledge of USAA Information Security standards as well as industry information security standard methodologies, frameworks, laws, and regulations.

• Ensures risks associated with business activities are effectively identified, measured, monitored, and controlled in accordance with risk and compliance policies and procedures.

What you have:

• Bachelor’s degree; OR 4 years of related experience (in addition to the minimum years of experience required) may be substituted in lieu of degree.

• 8 years of related experience in Information Security, Cybersecurity and/or Information Technology with a security focus to include accountability for complex tasks and/or projects.

• 6 years of related experience in one of the following domains: Security and Risk Management, Asset Securit