Information Security Analyst

Overview

The Information Security Analyst is responsible for contributing, implementing, and maintaining the credit union’s cyber security program. Leveraging the required skills and experience, the Information Security Analyst will investigate and respond to security incidents, work closely with internal departments and/or third parties, and provide status updates to management.

Qualifications

Experience in enterprise security document creation. Experience in enterprise security architecture design. Experience in NIST based Incident Handling Working technical knowledge of Firewalls, Intrusion Detection, Networking technologies ( LAN / WAN ), Data Loss Prevention (DLP), Network Access Controls (NAC), Security Incident and Event Management Systems (SIEM), Email Security. Vulnerability Management Tools (Nessus, Nexpose, Etc) Command Line Utilities such as Nmap, netcat, etc. Experience with security in cloud environments (Azure preferred) required. Microsoft Windows Server, Active Directory, DNS and DHCP, etc.

Microsoft Windows 10 and later Microsoft Office and Visio 2016 and later Ability To: Create and maintain detailed technical documentation Proven analytical and problem-solving abilities. Good written, oral, and interpersonal communication skills. Ability to conduct research into IT security issues and products as required. Ability to present ideas in business-friendly and user-friendly language. Highly self-motivated and directed. Team-oriented and skilled in working within a collaborative environment.

Essential functions

Review daily log reports generated from information security systems and investigate anomalous behavior. Process reported social engineering attempts to determine if a threat exists and communicate outcomes to involved parties. Monitor, investigate, remediate, and report security incidents as they arise. Work with other members of the Incident Response Team, as needed. Conduct social engineering exercises across the organization and assist with training remediation efforts. Administer the organizations vulnerability management program to identify and prioritize vulnerabilities.

Will also work closely with the Information Technology team and product owners to remediate discovered vulnerabilities. Administer the credit union’s information security systems and tools. Contribute to the organizations security policies, procedures, and processes. Implements the information security strategy and objectives, as approved by the Chief Information Security Officer, including strategies to monitor and address current and emerging risks.

Participates on the Change Control Board ensuring systems changes are made with appropriate Confidentiality, Availability, Integrity and Cyber Security design and controls Participates in industry collaborative efforts to monitor, share, and discuss emerging security threats. Maintains up-to-date knowledge of the security industry including awareness of new or revised security solutions, improved…

Read the full posting