Senior Security Vulnerability Analyst

Credit Acceptance is proud to be an award-winning company with local and national workplace recognition in multiple categories! Our world-class culture is shaped by dedicated Team Members who share a drive to succeed as professionals and together as a company. A great product, amazing people and our stable financial history have made us one of the largest used car finance companies nationally.

Our Engineering and Analytics Team Members utilize the latest technology to develop, monitor, and maintain complex practices that help optimize our success.  Our Team Members value being challenged, are encouraged to express their ideas, and have the flexibility to enjoy work life balance.  We build intrinsic value by partnering with all functions of our business to support their success and make strategic business decisions.  We focus on professional development and continuous improvement while enjoying a casual work environment and Great Place to Work culture!

As a Senior Security Vulnerability Analyst, you'll work with the team to understand, mitigate, and respond to threats quickly, restoring operations and limiting the impact. Additionally, you will apply knowledge of attacker techniques to uncover threats by analyzing log data and vulnerability research to report on and build detections. Technical expertise, and a deep understanding of cybersecurity concepts are essential for success in this role. Additionally, you will aide in redefining the vulnerability management program within the SOC.

Outcomes and Activities

Information Security

• This position will work from home; occasional planned travel to an assigned Southfield, Michigan office location may be required.  However, this position is permitted to work at a Southfield, Michigan office location if requested by the team member ​
• Identify and analyze threats to the organization, using OSINT, published vulnerabilities, Threat Intelligence and enrichment resources.
• Configure defense tools, create reports, and dashboards and build custom queries.

• Build detailed reports for leaders within the organization.

• Perform ongoing, comprehensive vulnerability assessments of network cybersecurity risks to enable risk management and mitigation activities.
• Utilize vulnerability data sources such as network discovery, network and host vulnerability scanning, penetration testing, operational exercise data, and compliance inspection reports to analyze, assess, compile, and prioritize vulnerabilities.
• Work with the Phishing team and threat intelligence sources to identify telemetry for SOC treat hunting.
• Monitor and respond to alerts raised by various toolsets as part of an ongoing 24/7 Security Operations Center.
• Report outages or incidents following guidelines and procedures.
• Detect, analyze, and respond to incidents, coordinate with other stakeholders for containing, eradicating, and recovering from an incident.
• Develop and refine threat hunting techniques.
• Drive modernization based on business requirements with minimal degree of risk to the company.
• Develop and implement new signatures/rules.
• Work with external 3rd parties to test security controls and tuning alerting detections.
• Develop SOC playbooks and document procedures.
• Work with Engineers to identify new logs and provide guidance on technical implementation.
• Manage EDR tool and test Incident Response capabilities.  
• Support more junior team members in the development of their skills. 

Other

• Serves as a 24/7 escalation point for the team.

Competencies: The following items detail how you will be successful in this role.

• Customer Empathy: Customer Empathy is the ability to understand the perspectives, pain points, and experiences of customers. It involves actively putting oneself in the customer’s shoes, comprehending their needs and challenges, and using that understanding to provide a better, more customer-centric experience.
• Engineering Excellence: Engineering Excellence is about bringing great craftsmanship and thought leadership to deliver an outstanding product that delights customers and solves for the business. This involves the pursuit and achievement of high standards, best practices, innovation, and superior solutions.
• One Team: A One Team mindset refers to a collaborative approach across the organization, where individuals work together seamlessly, without boundaries, as a single, cohesive team. Shared goals, open communication and mutual support create a sense of collective purpose. This enables teams to navigate challenges and pursue shared objectives more effectively.
• Owner’s Mindset: Owner’s Mindset involves adopting a set of behaviors that reflect